diff --git a/milky-way/secrets.libsonnet b/milky-way/secrets.libsonnet index ee2c65b..41ea5b5 100644 --- a/milky-way/secrets.libsonnet +++ b/milky-way/secrets.libsonnet @@ -24,6 +24,7 @@ // rather than a plain `import`. { 'k8s-secret-values.jsonnet': import '/Users/yuto/.config/sops-nix/secrets/k8s-config/k8s-secret-values.jsonnet', + 'grafana-admin.json': import '/Users/yuto/.config/sops-nix/secrets/k8s-config/grafana-admin.json', 'qbt-gluetun.conf': importstr '/Users/yuto/.config/sops-nix/secrets/k8s-config/qbt-gluetun.conf', 'gluetun-vpn-proxy.conf': importstr '/Users/yuto/.config/sops-nix/secrets/k8s-config/gluetun-vpn-proxy.conf', 'thelounge-gluetun.conf': importstr '/Users/yuto/.config/sops-nix/secrets/k8s-config/thelounge-gluetun.conf', diff --git a/secrets/k8s-config/grafana-admin.json b/secrets/k8s-config/grafana-admin.json new file mode 100644 index 0000000..fbd0cd3 --- /dev/null +++ b/secrets/k8s-config/grafana-admin.json @@ -0,0 +1,19 @@ +{ + "data": "ENC[AES256_GCM,data:izI89ieNluXDRlXleBi5+hWoHjF2WyALxBJfl6Q3ga64/0mVlJXx2NRhIVOSgChmlKm/RPc9lLBodx/tVYe3gZBkQ3qbpB2gcHj9GNbOaPhHNdVu8rF9oP/BLhL41cRfbQn6r0yCXCTUY1QBGhC5u1UBfZ6XalP9P+2Y9xA46C2I++CX2bjkbCS8bGJrFhXuSTU9swKuW27VUu5zPOrDwAfE5NvLuDJHywpOioDgCcfz/+W1sKSwBGPKHKBrwtPe0jGeI2PlHl9+0sr73My0V/G0hQjaEBtjcO917zer44mHdtS8oJJ44NMTt9eQxTlS5rBNLcqzP3K+NMKGQw==,iv:RyGRKuhCbZITAjyn/DFZUTfLt+167lpFzTMPndnVcQM=,tag:dXUU0lwdHTi/TSC6UO0RBQ==,type:str]", + "sops": { + "age": [ + { + "recipient": "age1k02u4z06c0qwen95uwk4qphns3qqujtmz57sr3ea34f2rwh5kvjsfkjrfy", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsaTRNVWdyWVZXM3JQUmtt\ndkgvTklpblBZcGd0VEVSczBUQzFOMnZ3UEFrCno5d0NzOUI2ZVJRVW9VRmJGZUlz\nZTJjNDNUNWVFdHlWTkJDYVU1SnVqUTgKLS0tIDU0TE9qU095VlhSMjJ4UTBuVXl0\nUmNuTVFXamJFZWlhWXBBaG1xL0U0N00KZ48Q45bC8FEgT1OLAYOlIM3llLosxkgj\nUYn5UEb/Yq6e36AgUWesBFPkn951jeUIyAAzZu6sk8e9fRY+aqBnNg==\n-----END AGE ENCRYPTED FILE-----\n" + }, + { + "recipient": "age12ecq8rcc8s52e7nnzryjpafs73nzycp8jaa9z8s2gpnl5zn00a9q4u57nq", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwRUlkWWFkbVo4NGNycUJj\nOGJLRHd2dklaZkNnR0lUcnJRMlFUOTNYZEFFCmtOZkhjV1RYSHdrdEFqQmcrNzY0\nQkJXeVlqLzBJYmRGTzMyVGlPeHdEK3cKLS0tIDNPRFN5YlFPRkxaVUp4TSt3Rm55\nV2FxSGdRQmh0bC9UbXkyYTd6dkF3eFkKMDfF0RlxD5vNr/MZr0xr2oIuVCLEMUtD\n2Zs7Kui7exem6ERcMQdn8NUiQY2Uan8UtSSNLGnkBUL0E1l7+8vi4g==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2026-09-28T04:28:30Z", + "mac": "ENC[AES256_GCM,data:UrS4bxSuY1V+Nk5CP+mqc2HgNnboEbJdVWCY0ykR7iS+qFIlWATwb+5xzGgxvbeTSKZ01oBXJhc2dV4ZUfDtC5gPMYDlRFuVYsIe10jGSfiRlxXBfJw9MbMA/MaveoF5a13nDqP86PqJXSbzj5T05BA7UMgk7QFpJBw2jqr+VL8=,iv:AARWH7mPAUtxHjwTVAIAiekXLBbW99LLJYZELScc3gA=,tag:YTCd4Hi3dm5T92n3UVvKSw==,type:str]", + "unencrypted_suffix": "_unencrypted", + "version": "3.10.2" + } +} diff --git a/venus/modules/home-manager/sodium.nix b/venus/modules/home-manager/sodium.nix index d196c58..29f69c1 100644 --- a/venus/modules/home-manager/sodium.nix +++ b/venus/modules/home-manager/sodium.nix @@ -152,6 +152,11 @@ mode = "0400"; sopsFile = ./../../../secrets/k8s-config/k8s-secret-values.jsonnet; }; + secrets."k8s-config/grafana-admin.json" = { + format = "binary"; + mode = "0400"; + sopsFile = ./../../../secrets/k8s-config/grafana-admin.json; + }; secrets."k8s-config/qbt-gluetun.conf" = { format = "binary"; mode = "0400";