Secrets Time

2023-03-08 23:16:42 -05:00
parent 04e8575f81
commit 80a7560292
2 changed files with 39 additions and 0 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -0,0 +1,9 @@
+keys:
+  - &hydra age12qq2fn4nxx9g99vp5knndtn0xa0p6g9ztn48gv9ap8054am39c3qsezz90
+  - &universedesk age1cutw77xx9psnsth40uuvplx0r4u5hfsaytjh3dr6en3plyewcapq7du59f
+creation_rules:
+  - path_regex: secrets/[^/]+\.yaml$
+    key_groups:
+      - age:
+          - *hydra
+          - *universedesk
--- a/secrets/deployment.yaml
+++ b/secrets/deployment.yaml
@@ -0,0 +1,30 @@
+DISCORD_TOKEN: ENC[AES256_GCM,data:SedcsFru2rIMIg==,iv:z8G0RiHCQVm8Pa72vU4H1HLvshvqLdM4sTEPfhg0J7o=,tag:eL+3Q6ooZZlR0aeYRu+Bag==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age12qq2fn4nxx9g99vp5knndtn0xa0p6g9ztn48gv9ap8054am39c3qsezz90
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIM3hYd3BZSjBWZHNtQUtT
+            RWlTWVA3cEp1R3lkSjBlMWJva0JRbXk4MHhrCnNXWS9wUjdlR3NXdzkyRGczTkdj
+            Z0E5cHhoVTJYMzZUUVNTNFBLS05jZUEKLS0tIHc0eGZNQ052RFZ1UW93N3RzcVNN
+            V2x6SEdXWk9sQWdyczlHSHRob0JQRjAKJsqdeGX42tBy/hoKX5yAo6PO0WVKR0xb
+            Pg/zm/7SPDiKuruPiFybh40aUT8zVm4QmBT9PGqI9yZNiqxylCtcnQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cutw77xx9psnsth40uuvplx0r4u5hfsaytjh3dr6en3plyewcapq7du59f
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiQjJBd3F1VW5MNTVWcVBJ
+            ak90L3UxdE5lZHRrNERNT2NDcFRhdVRMSWhnCm1LOUQ2blR1SmpjTFlMandPUnZw
+            N3MySUt1L09ta2N3VGVsa3BUWnZwaTAKLS0tIGZlS09tSFpSZ3BBR0doTmR1eUZR
+            NFF0ZWE2K25RbnJabFd0TC9CeVJkYmcKUoPtAFkNWXdh0hmnA7wSz2IZTMhd7Bt+
+            7pV2aeG92BiRlVvPece+Gqy/gescaBeXgZeKbA7AW0rh3tD5U4+Vmg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-03-09T04:15:53Z"
+    mac: ENC[AES256_GCM,data:LASEXmqW2qZiK+GTDL2XLXA0Qe4ptPQqdbVSli9P+owsRjwne7bJoKKMnYnLiC70DEPJR5q87OyjprfMUjXhu4cqmonzUsA/Xestxx/qARhi+OhIYDAG3XF46klX6anapewSbKP60oJyFicTyhRbY0qIDJRSuwW4z6sjx4JYxzE=,iv:rMA9HMwM14vgcWYQr0/QupK0cYGpea0r+rhMpGAY9GE=,tag:XcR2vuGTa9GA9694XQ9N3A==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3