From bdefb8aa7c4b8e150d5f139a78e82c92a4190757 Mon Sep 17 00:00:00 2001 From: karitham Date: Mon, 17 Aug 2026 09:55:45 +0200 Subject: [PATCH] opencode: add belaf as recipient --- .sops.yaml | 6 ++++-- secrets/opencode.env | 22 +++++++++++----------- systems/belaf/default.nix | 1 + 3 files changed, 16 insertions(+), 13 deletions(-) diff --git a/.sops.yaml b/.sops.yaml index 3a603bc..0b26771 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -12,8 +12,9 @@ # existing files to add the SSH recipients. The age keys can be removed once # all consumers are migrated. keys: - - &ozen ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDSNRhCfSzYU5bliUcc+3axoVI46XbQ7uE58374CoOg3 - - &kiwi ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAdfgc1G9wmgw2mTI6nSPTBcev6DJsYLbb5NO0wT/j0c + - &ozen ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDSNRhCfSzYU5bliUcc+3axoVI46XbQ7uE58374CoOg3 + - &kiwi ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAdfgc1G9wmgw2mTI6nSPTBcev6DJsYLbb5NO0wT/j0c + - &belaf_age age13mteasehqfnmmne7g57h6cgt9jpkqu08e55g3wn0pc9h5gqragms2gzat8 - &ozen_age age17cxj5zwkkxjkjvmpskpkyh6yt4xj4l8h6jyjxez3nmq6y9tvhqjsdp0m5j - &server_reg age1j6j2ldpsj7jmchstwl3nktvatut9hzxnemmy6py84rrga5eaf93q5w8s39 creation_rules: @@ -24,4 +25,5 @@ creation_rules: - *ozen - *kiwi - *ozen_age + - *belaf_age - *server_reg diff --git a/secrets/opencode.env b/secrets/opencode.env index 728a208..ce63c3a 100644 --- a/secrets/opencode.env +++ b/secrets/opencode.env @@ -1,17 +1,17 @@ -GITHUB_TOKEN=ENC[AES256_GCM,data:SHYRX0hYveZferDu7+xV189Y2WGRBC3pPtKQW18nzDzjHyrayFBxRpMz,iv:IwJDB6qsNHyI7oZMXsiJUlYJFtvMZf4ovsCIP4bauNY=,tag:WccvOAO8QW6dbC2ngzFi7g==,type:str] -KAGI_API_KEY=ENC[AES256_GCM,data:RSnpfe1VupGrkXU74mdeS6fVgJbZRzyi4C9ie2vIO0/F5a1k4FiUy1jVIA3jFx3tO5yzmk5WJ40STZs1ng7sFgaB/iWhSWsdcqz5ZIcjhvzNiXB2YI3FJQo=,iv:80xFz6jlrDz0Fq2LU/oRmQ4D0aD2qb5WOcFJX7mjTRk=,tag:0krmu9FeQnfrccSYpZf1CQ==,type:str] -LINEAR_API_KEY=ENC[AES256_GCM,data:PrgpeVQSz5FU7nAcOS+/4aT9GHPVC1Wij1qieOHwc8GJSIs2lChznt1G/735Z6VorhI=,iv:yEu9g8LFBiiYWGOMDbFluBgq/wr1fWKF6BPcp8ynpPI=,tag:IVX5bef+NqbBEGvr185+kg==,type:str] -EXA_API_KEY=ENC[AES256_GCM,data:YUlyDtedEASuvi0tAW3VqqaINhHkfObs5zS6m5KLDzeiIdlyfsE=,iv:h9poL0P9XaoSzApp6Zd/PD4gnS+r458nq7IYGY9aFlo=,tag:N2aZqV3v6K2BFWZ4FGGYGg==,type:str] -SENTRY_MCP_URL=ENC[AES256_GCM,data:qNmfsB50xgFzNse3Fk3yTOBHg78uP37ZRsJW6YQ35QAhIgwSmgo=,iv:pMKJn/UKVAS2o7QwtwjMKyFZHULdjRgz6kWwpN2mZpo=,tag:y4PwKVqBu7gSZRw/e4dfyA==,type:str] -sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHdLbEpGdyArSlVH\neUQ1azA3eGVHdXNjak5jT3pWOW1ZNThjOUJiekFuMmlnM3htZzBrCmtleTB2bHJJ\nRWgrMCt1VSttamxoMEJGeXRIVXFJNHdEaUg1WFM5dUNVQkEKLS0tIGdpbHRFM1JT\nWnBTZmxYc21Nb2Z0VVlDQUo1WDd5aVlLY0FVdHREaWVOZEkKqMvtbd/2YHSHgbOP\nrRaTywZX+KzT8IHAO+UBIXlSvRnXVDPunNHTIsT3WsGnwO6rwCpu1le8arRcNOkH\nJdnl4g==\n-----END AGE ENCRYPTED FILE-----\n +GITHUB_TOKEN=ENC[AES256_GCM,data:g/pqSC70GyTu47q/4GJaK6Gbpiz4VHQOJDl+I/kUg+05QiSYbg2kLgse,iv:IwJDB6qsNHyI7oZMXsiJUlYJFtvMZf4ovsCIP4bauNY=,tag:+y/9/OJXM6HdTNk3JXsINg==,type:str] +KAGI_API_KEY=ENC[AES256_GCM,data:t+cD44D/LewJiIreUkQaFDnwHE7etkKDkDy0hf/PlgeOzOH/6uynzcrkj+8ucWp7TdN54csTT9APIf7obpfuWAdxUGWJCroKpVMKWhJUeH0sKieAX/jT1cE=,iv:80xFz6jlrDz0Fq2LU/oRmQ4D0aD2qb5WOcFJX7mjTRk=,tag:jNem3NKoH+pXcnwUteOguA==,type:str] +LINEAR_API_KEY=ENC[AES256_GCM,data:3a0OkLtLSjZII+U4VpwOMimXkpikyrwL8xsnpbSUlq76ue4akST6ce8AGUvWz+JsVyU=,iv:yEu9g8LFBiiYWGOMDbFluBgq/wr1fWKF6BPcp8ynpPI=,tag:ROyd6FXhYs4nTfUYSQTuxw==,type:str] +EXA_API_KEY=ENC[AES256_GCM,data:+k2MrLH0V5S1cc2EnSZ7CgkzIdAga9O/TYZwWA+M72oaDD6uliE=,iv:h9poL0P9XaoSzApp6Zd/PD4gnS+r458nq7IYGY9aFlo=,tag:xAz2WeeP0+eg4REXGW0Teg==,type:str] +SENTRY_MCP_URL=ENC[AES256_GCM,data:fprKxyopD4qRoZqLojNErq+4CPE1VI5QTUNQn5DZtgBzY5Gx6+E=,iv:pMKJn/UKVAS2o7QwtwjMKyFZHULdjRgz6kWwpN2mZpo=,tag:tRXnfCOfw80q4id0PPbBCQ==,type:str] +sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHdLbEpGdyBPSWJj\nb2V1ZjZiNjRvNDJnM2RDOWpiNk1iOWFzRGpUNThmbnJ1QjdNNUNzCi9haU9xTFcy\ncm1PYVJmcUk1cmZqSnVXM1FKMndtMWZ1U0Zpb2E1MXlMVm8KLS0tIHdMQVhNcFNZ\neEFWZDdsMkxoWlp2QU9BZ0RqZ0lUNzkyWE9BbmdXU0pBdVUKnf1RiM8/yUJhDaUc\nhoIQddc9H9AvZasv+rQFtjhXBnRKSSQyWE40gha9FPjW18iFzvcDEMEvWjxExfpn\nR5PHsQ==\n-----END AGE ENCRYPTED FILE-----\n sops_age__list_0__map_recipient=ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDSNRhCfSzYU5bliUcc+3axoVI46XbQ7uE58374CoOg3 -sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9EZVJNQSBBZDhq\nMlpGdG1oYzczaXpmbXAwank3Wm9tRmJXR1ExQUdhNzFxVE1FTFI0CmFMbldvSWxl\nR1lCcng1RUk1d2I0Um1DSnd5cmFMNU9qd1FMY3hDaWo5aDgKLS0tIEN6NUJETVIx\nTHdaRkxXc2ZUL0FCcDRNaUdZZmtSU05yWld2dXU5c2doUUEKb8oko09owOqPJHZe\nCQDN+syc3OcHISDTU71HdSKTRHFF8DLZRQpq7/Co6JKQT55IASE/M24yBUv4nwNi\nFX+o6w==\n-----END AGE ENCRYPTED FILE-----\n +sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IE9EZVJNQSA0M2pE\neklnUW40MlB3N3Q3WnZ0UEtnUzhOSkNwWHNlcnpka3NLbnZ4OVNNCjU0UzZwSFk3\nRGdjc2RXdndBbStvOFpuWkM1SzgrdGpsZGUrTjFKckRrT0EKLS0tIHhOaHZNZitY\nSDdqeFkzc25uc05hdFVNcitrN3NoOEo2K3ZsUlozcFlXS0UK+ZudPGHRW3xSYQDI\ncAtbfc2/2JHhMddv9NVK6FDF8QZ/i2/UUfZN1s3Y3sXnc7ITmwtbwbtUv6ATQLnP\n8am3ow==\n-----END AGE ENCRYPTED FILE-----\n sops_age__list_1__map_recipient=ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAdfgc1G9wmgw2mTI6nSPTBcev6DJsYLbb5NO0wT/j0c -sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPZkhMSnhtMHdoK0R1azNs\nbVlld2hNMXl5eHlzczNRY250QnpXbytCSGtRClgrQWNGL2FScDR3bklXT3NXZXFi\nRjUzemhieUszNGQzcmJGNFNlRHNmVmcKLS0tIGxqcDRLWHlQVG9Mc1RUNGFBRnBW\nYTdSQjNTV0VnVHZ0cUg0QlpKTm0vd0EKvQQHVlqR8XOptM+O7dQES1hms9rIBq36\nWuKP0Rpm//UjSPTZv1Nm7VgkUFhQUzxDtrCvN0iXy+pjo6SW3NZhfA==\n-----END AGE ENCRYPTED FILE-----\n +sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBINkhheFlHTVd6RVhwMmlo\nM1NaWVFZdEtkUTZVcUxJYXVIdnBxenNHRHd3Cnd5YnhmT0V1Q2pUQmZiM1l6cDJU\nUzVhR1BmSis1QzJHdS9FbHhkVThMMmcKLS0tIFZYQ2t1aXJuTldhY2dWVmFGclI2\ncDdFejg5aTY5RWxUNWt1RmtsN2MwMWsKi0VHghSvvMdjgLLxAl2CeeOTYGvUsi1G\neC5JuVXUEGgQJHaf8GDGPOPOXBFdi/HjtSDyEBzYTyUNWJ/c4M5+wg==\n-----END AGE ENCRYPTED FILE-----\n sops_age__list_2__map_recipient=age17cxj5zwkkxjkjvmpskpkyh6yt4xj4l8h6jyjxez3nmq6y9tvhqjsdp0m5j -sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRRmdLNGFpemduaktqTE1l\nWW1paTF2cGZkN0VHRVpGYUhFMXgrSGljbjNjCjF1SGRhMjJpSkNrZ3NYb08zcHRv\nbUpyZEdaVEIvbHk2MG9HZlhvQ0RIQ2MKLS0tIGQ1MlFhQTgwQ3ZBbFZzdUtCc2xk\nWlV4NEYyZDRIMmp5VjViMVo4c2NFRnMKafPcBStOaL+YVlMFvlYoczoAbrnNpIBZ\nhIS1UICrfN6EUi1rK6dUApG+wF9I6cKjFSk0w9X1m+0TG8zhXzGsTQ==\n-----END AGE ENCRYPTED FILE-----\n +sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnSXlaNVRLbG1hVHZmcEN0\nR0pnb21BczhySCt4SXc0OFRVbjgzUTROOVc0CldHam1pK1N5cnRka0E2TUExeXph\nV3UvUERoVktiMG9sSS9PSGx0a2Q0bWsKLS0tIFB4YXRsR0xFckV5L09MQ3dwQm9R\nbUN0WUVaaXZISEtZNldBOUNzZFhZbFEKKv4ybBd/NySlQ3pe0gCUG00jO5xQEbPv\nRbKo2aFVP7zv+xJj9uam1q2CTrFoWt1GY25JK6Utn7giMNy2IvBu6A==\n-----END AGE ENCRYPTED FILE-----\n sops_age__list_3__map_recipient=age1j6j2ldpsj7jmchstwl3nktvatut9hzxnemmy6py84rrga5eaf93q5w8s39 -sops_lastmodified=2026-06-29T12:15:46Z -sops_mac=ENC[AES256_GCM,data:6g4iCT0rXe1C1za0INo7CoNXj9f93XC8DVKkDuZLDueGggm+aiv5ZUDFf4zgT2KCAwMbZxngqbfDvGeMojcNOObhxbLPEzr1h/KCdUG57DQPIWomeGX4wKGLQVvO5+I/FJqZNwrad6ByYPPv92A+hmUvd2HNA9BhoMQEEdrb8U8=,iv:dTfRkiKPxn8fRNtZyRl+80Iqb9ikGLLZ4X5Mk4V2Up8=,tag:BieMM1o9AbCupffOw/4aDA==,type:str] +sops_lastmodified=2026-08-17T08:04:26Z +sops_mac=ENC[AES256_GCM,data:AeEzoba6Sph31bs4+nAKdO9MsLaAFpoeiOk4BJVAqxlIxk0NvWuLX+j/SzG2BZLlba4qexqgz/92AD6fqQ7j4eDxIO/jOu8dtNg8CSjepwPITgXYhZiqkA0D84Qdtmgn5sdgUY4tlsehI7zoDhEBlOAZX4gxDkNDt7SXmmeOdyw=,iv:Nkc281TH/vbtF2Nvgdc836YRY3FYOYVlY8lMe2sNHyY=,tag:OVqwR8jdpVYdVPIO4sUhQg==,type:str] sops_unencrypted_suffix=_unencrypted sops_version=3.13.1 diff --git a/systems/belaf/default.nix b/systems/belaf/default.nix index 11cd972..fd75826 100644 --- a/systems/belaf/default.nix +++ b/systems/belaf/default.nix @@ -9,6 +9,7 @@ }; virtualisation.docker.daemon.settings.data-root = "/docker"; + systemd.services.attic-push.enable = false; home-manager.users.${config.my.username}.imports = [ ./home.nix ]; } -- 2.51.2