A lowly tech priest's attempt to please Mars
feat: initial setup
+312
+15
.editorconfig
+15
.editorconfig
···
1
+
root = true
2
+
3
+
[*]
4
+
end_of_line = lf
5
+
insert_final_newline = true
6
+
charset = utf-8
7
+
indent_style = tab
8
+
9
+
[*.{yml,yaml}]
10
+
indent_style = space
11
+
indent_size = 2
12
+
13
+
# Trailing whitespace is significant in markdown
14
+
[*.md]
15
+
trim_trailing_whitespace = false
+15
.sops.yaml
+15
.sops.yaml
···
1
+
# yaml-language-server: $schema=https://github.com/chri11g6/sops-schema/raw/refs/heads/master/sops.schema.json
2
+
3
+
creation_rules:
4
+
- path_regex: kubernetes/.*[/-]secrets\.ya?ml
5
+
encrypted_regex: '^(data|stringData)$'
6
+
age: age13u6nqs8jgp268mya8rht9gyhu86cc53j74f5va65077rsrvkr9gsjeqk88,age16tv9zf54wf4txwjx39wz9phw7zggtxe7k0p2lkhtx59u4he72erq4d9xh9
7
+
- path_regex: machines/.*
8
+
age: age13u6nqs8jgp268mya8rht9gyhu86cc53j74f5va65077rsrvkr9gsjeqk88,age1vxxk0ad7x3nqj84a9vdlth7zyd0d4a0mglnz0qr8lp9dteus8ppqk0w29z
9
+
- path_regex: talos/tal(secret|env).yaml$
10
+
age: age13u6nqs8jgp268mya8rht9gyhu86cc53j74f5va65077rsrvkr9gsjeqk88
11
+
- path_regex: talos/tal(secret|env).yaml$
12
+
age: age13u6nqs8jgp268mya8rht9gyhu86cc53j74f5va65077rsrvkr9gsjeqk88
13
+
stores:
14
+
yaml:
15
+
indent: 2
+11
.zed/settings.json
+11
.zed/settings.json
···
1
+
// Folder-specific settings
2
+
//
3
+
// For a full list of overridable settings, and general information on folder-specific settings,
4
+
// see the documentation: https://zed.dev/docs/configuring-zed#settings-files
5
+
{
6
+
"terminal": {
7
+
"env": {
8
+
"EDITOR": "zed -w"
9
+
}
10
+
}
11
+
}
+13
kubernetes/flux/loader/load-system.yaml
+13
kubernetes/flux/loader/load-system.yaml
···
1
+
# yaml-language-server: $schema=https://github.com/fluxcd-community/flux2-schemas/raw/refs/heads/main/all.json
2
+
apiVersion: kustomize.toolkit.fluxcd.io/v1
3
+
kind: Kustomization
4
+
metadata:
5
+
name: load-system
6
+
namespace: flux-system
7
+
spec:
8
+
interval: 10m
9
+
path: ./kubernetes/system
10
+
prune: true
11
+
sourceRef:
12
+
kind: GitRepository
13
+
name: flux-system
+21
kubernetes/system/storage/longhorn/helmrelease.yaml
+21
kubernetes/system/storage/longhorn/helmrelease.yaml
···
1
+
# yaml-language-server: $schema=https://github.com/fluxcd-community/flux2-schemas/raw/refs/heads/main/all.json
2
+
apiVersion: helm.toolkit.fluxcd.io/v2
3
+
kind: HelmRelease
4
+
metadata:
5
+
name: longhorn-release
6
+
namespace: longhorn-system
7
+
spec:
8
+
interval: 30m
9
+
chart:
10
+
spec:
11
+
chart: longhorn
12
+
reconcileStrategy: ChartVersion
13
+
sourceRef:
14
+
kind: HelmRepository
15
+
name: longhorn
16
+
version: v1.9.1
17
+
values:
18
+
defaultSettings:
19
+
defaultDataPath: /var/mnt/longhorn-data
20
+
defaultReplicaCount: 1
21
+
storageReservedPercentageForDefaultDisk: 1
+9
kubernetes/system/storage/longhorn/helmrepo.yaml
+9
kubernetes/system/storage/longhorn/helmrepo.yaml
···
1
+
# yaml-language-server: $schema=https://github.com/fluxcd-community/flux2-schemas/raw/refs/heads/main/all.json
2
+
apiVersion: source.toolkit.fluxcd.io/v1
3
+
kind: HelmRepository
4
+
metadata:
5
+
name: longhorn
6
+
namespace: longhorn-system
7
+
spec:
8
+
interval: 2h
9
+
url: https://charts.longhorn.io
+8
kubernetes/system/storage/longhorn/namespace.yaml
+8
kubernetes/system/storage/longhorn/namespace.yaml
+1
talos/.gitignore
+1
talos/.gitignore
···
1
+
clusterconfig
+5
talos/manifests/tailscale.yaml
+5
talos/manifests/tailscale.yaml
+157
talos/talconfig.yaml
+157
talos/talconfig.yaml
···
1
+
clusterName: proteus
2
+
endpoint: https://${proteus_secundus_ip}:6443
3
+
4
+
# renovate: depName=ghcr.io/siderolabs/installer datasource=docker
5
+
talosVersion: v1.11.0
6
+
# renovate: depName=ghcr.io/siderolabs/kubelet datasource=docker
7
+
kubernetesVersion: v1.34.0
8
+
9
+
allowSchedulingOnControlPlanes: true
10
+
11
+
patches:
12
+
- |-
13
+
machine:
14
+
sysctls:
15
+
vm.nr_hugepages: "1024"
16
+
17
+
controlPlane:
18
+
certSANs:
19
+
- ${proteus_secundus_ip}/24
20
+
nameservers:
21
+
# https://www.dns0.eu/
22
+
- 193.110.81.0
23
+
- 185.253.5.0
24
+
# ingressFirewall:
25
+
# defaultAction: block
26
+
# rules:
27
+
# - name: kubelet-ingress
28
+
# portSelector:
29
+
# ports:
30
+
# - 10250
31
+
# protocol: tcp
32
+
# ingress:
33
+
# - subnet: ${admin_network}/24
34
+
# - subnet: ${proteus_secundus_ip}/24
35
+
# - name: apid-ingress
36
+
# portSelector:
37
+
# ports:
38
+
# - 50000
39
+
# protocol: tcp
40
+
# ingress:
41
+
# - subnet: 0.0.0.0/0
42
+
# - subnet: ::/0
43
+
# - name: trustd-ingress
44
+
# portSelector:
45
+
# ports:
46
+
# - 50001
47
+
# protocol: tcp
48
+
# ingress:
49
+
# - subnet: ${admin_network}/24
50
+
# - subnet: ${proteus_secundus_ip}/24
51
+
# - name: kubernetes-api-ingress
52
+
# portSelector:
53
+
# ports:
54
+
# - 6443
55
+
# protocol: tcp
56
+
# ingress:
57
+
# - subnet: ${admin_network}/24
58
+
# - subnet: ${proteus_secundus_ip}/24
59
+
# - name: etcd-ingress
60
+
# portSelector:
61
+
# ports:
62
+
# - 2379-2380
63
+
# protocol: tcp
64
+
# ingress:
65
+
# - subnet: ${proteus_secundus_ip}/24
66
+
# - name: cni-vxlan
67
+
# portSelector:
68
+
# ports:
69
+
# - 4789
70
+
# protocol: udp
71
+
# ingress:
72
+
# - subnet: ${proteus_secundus_ip}/24
73
+
patches:
74
+
- |-
75
+
cluster:
76
+
etcd:
77
+
advertisedSubnets:
78
+
- ${proteus_secundus_ip}/24
79
+
80
+
nodes:
81
+
- hostname: proteus-secundus
82
+
ipAddress: ${proteus_secundus_ip}
83
+
controlPlane: true
84
+
nodeLabels:
85
+
intel.feature.node.kubernetes.io/gpu: "true"
86
+
tailscale.dev/present: "true"
87
+
# nodeAnnotations:
88
+
89
+
machineSpec:
90
+
mode: metal
91
+
arch: amd64
92
+
useUKI: true
93
+
secureboot: true
94
+
schematic:
95
+
customization:
96
+
systemExtensions:
97
+
officialExtensions:
98
+
- siderolabs/i915
99
+
- siderolabs/intel-ucode
100
+
- siderolabs/iscsi-tools
101
+
- siderolabs/tailscale
102
+
- siderolabs/util-linux-tools
103
+
104
+
installDisk: /dev/nvme0n1
105
+
volumes:
106
+
- name: EPHEMERAL
107
+
provisioning:
108
+
maxSize: 50GiB
109
+
encryption: &volume_encryption
110
+
provider: luks2
111
+
keys:
112
+
- slot: 0
113
+
tpm:
114
+
checkSecurebootStatusOnEnroll: true
115
+
- slot: 1
116
+
static:
117
+
passphrase: ${proteus_secundus_ssd_passphrase}
118
+
- name: STATE
119
+
encryption: *volume_encryption
120
+
userVolumes:
121
+
- name: longhorn-data
122
+
provisioning:
123
+
diskSelector:
124
+
match: disk.transport == "nvme"
125
+
minSize: 500GiB
126
+
grow: true
127
+
filesystem:
128
+
type: xfs
129
+
encryption: *volume_encryption
130
+
131
+
extraManifests:
132
+
- manifests/tailscale.yaml
133
+
kernelModules:
134
+
- name: nvme_tcp
135
+
- name: vfio_pci
136
+
137
+
networkInterfaces:
138
+
- interface: enp86s0
139
+
addresses:
140
+
- ${proteus_secundus_ip}/24
141
+
routes:
142
+
- network: 0.0.0.0/0
143
+
gateway: ${proteus_gateway}
144
+
mtu: 1500
145
+
146
+
patches:
147
+
- |-
148
+
machine:
149
+
kubelet:
150
+
extraMounts:
151
+
- destination: /var/mnt/longhorn-data
152
+
type: bind
153
+
source: /var/mnt/longhorn-data
154
+
options:
155
+
- bind
156
+
- rshared
157
+
- rw
+19
talos/talenv.yaml
+19
talos/talenv.yaml
···
1
+
proteus_gateway: ENC[AES256_GCM,data:xcFr7bVazTonOapF,iv:VgBTk3l1Q8CtpXorP0sukR2IwDhpwdcR8WP+wwwIvxY=,tag:tEnw5i8Tlx39fLil6siEHw==,type:str]
2
+
proteus_secundus_ip: ENC[AES256_GCM,data:gbdC0Ft+J0Tr461g,iv:sF1N9m/1w0EpzxCPjWSnd4Ht3tudo0XogXG8bYE3NkQ=,tag:3CKvozSHh92L+PQGUjdvQg==,type:str]
3
+
proteus_secundus_ssd_passphrase: ENC[AES256_GCM,data:X99/HFkWT3+Mz4zF+2YfwE9J2v6aBsuvtMx63oVs/P5wFYdcQtJ6/+ZYaAEC0mPgnenZSEzrbIVsIiue8IA3NOBor/sGOCDD8f2ATXcpKXYkZXoO9y6ELi7Infj76GSpJTu0IJUBpwjRKQPMVut/U0FJjR57ehjsYbcgSl51auec12C+yg3SaSThs5Nq2yde5FKDqV8qn+5/UsFUlxIv8TFD4pGtY10auw01EA==,iv:oqP2cR1VjerkcL7sxE8Iyqh5qJMH8jR57F/DWB2/a6Q=,tag:zMCNqXCUSIzm0+Zz10BGXw==,type:str]
4
+
admin_network: ENC[AES256_GCM,data:oc5xrdtIcWzMcYQ=,iv:GrumOJ7+CO9bRrWkmiD3ERZFGiUGcjiN6/Ue7+MvlJY=,tag:x6dYZvHj4GZXOTGUBozrPw==,type:str]
5
+
sops:
6
+
age:
7
+
- recipient: age13u6nqs8jgp268mya8rht9gyhu86cc53j74f5va65077rsrvkr9gsjeqk88
8
+
enc: |
9
+
-----BEGIN AGE ENCRYPTED FILE-----
10
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlUmZpNDh0b0lxWGNvS3Nq
11
+
N1pCVjMvcTFKQjZFNTU0dzNxZk9QSjBoTmw4ClFtRVUyTldkbDVLaFNJYlo4ZWZN
12
+
QVdaUkZrc1pRZzlRR0gzYmJEWWhmREEKLS0tIE0zYW9iSDdMZytaQXpWSG5kWUF0
13
+
MFYyWWw0Q2pkajdOeVNRcmkwL1RxQnMK0g+KnIWd5tGyrW8XO/21XzZoy7EzJP/T
14
+
PvJ7f2tpLekKrBu/5YvIbl3davF+V1YV30L3ySFuDzdOcz3hg+DxbQ==
15
+
-----END AGE ENCRYPTED FILE-----
16
+
lastmodified: "2025-09-14T10:25:33Z"
17
+
mac: ENC[AES256_GCM,data:u9YpIFGexs1yFEW0N00HtxvQB/9clxMnabkjtC9mEcgfc/2rP07HCR0Pqk387q7ZFIMfiZRRTA371f5eUmOTDqIVMVSYbory9NnS+fqx6X5KwHbMIC2k/juXoh/lrUMcgBg4FakHQVU6qYFe4Jo5ieMoMKs8cYbfr8K3okSlO2o=,iv:Ecx9Sq3iG10GLi2N9xZgsZJPhaAGijLPYrZwzTZe5ow=,tag:PwufQf5dd/PhKHhaoTjpKQ==,type:str]
18
+
unencrypted_suffix: _unencrypted
19
+
version: 3.10.2
+38
talos/talsecret.yaml
+38
talos/talsecret.yaml
···
1
+
cluster:
2
+
id: ENC[AES256_GCM,data:ajuMdPcYyz40o9nyCoj0iVm96gRHaie3XSsZaT8hJEj5PdwfR9rVxZ1L5vg=,iv:XSsg3CYsahBiz6SGBw7WIZPtbV0qVsmlZdfV7pFsrDA=,tag:Q57l+9AgImifKH0MKMkifw==,type:str]
3
+
secret: ENC[AES256_GCM,data:Gwx5mTU6iUCfxgLivN/RgkjsF/xGvQ19bFeia/yn8GLW+fcrsI6lLD2K3L0=,iv:hb77lrk60ubkg6lz0mEofgeNBxdc2AoApvTcNZiBRKE=,tag:ZC3ehTLxpR77XXFBmZ9QFA==,type:str]
4
+
secrets:
5
+
bootstraptoken: ENC[AES256_GCM,data:HFoeoCyazd94fDaekJXRDCa5k+Gwxmw=,iv:314YzQuiLgC+hhT2tBiZNSP9fnulttrbdFXWNN3J5Zw=,tag:qHEVf9H5MESMesSGWKO9aw==,type:str]
6
+
secretboxencryptionsecret: ENC[AES256_GCM,data:zzg8O30bhfCCpk9VB7pzT4nlg0ECyILslot4Tol3Rz8JBuMcbFfGorBgsIw=,iv:LLTApCYP+9sZ09oJgJZEE/UfznMuduilGQstVMj3Oog=,tag:kW2yY/0jlp4p4sFMXhpIxA==,type:str]
7
+
trustdinfo:
8
+
token: ENC[AES256_GCM,data:1Spbc6cp0PpZMD5nKg+SwDzxuo3W/lI=,iv:DdegyQh6Nbripx+0Xetg5m/gDoLZxlOnyvBcJfCTfII=,tag:f8cYPS5MZo7cxHiAdqebcw==,type:str]
9
+
certs:
10
+
etcd:
11
+
crt: ENC[AES256_GCM,data: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,iv:t6WBbjvTPv4RIFXQ7TWps0hXsSBTlzdR5VxsKVQ+Vzw=,tag:ZnfLTk6o+bPwYYvcmBn+6w==,type:str]
12
+
key: ENC[AES256_GCM,data:bPkjcYR/e3Kfr2lU+X+CJNsAIV65q+CH08hihiWjT7efWGdMv8bhnXOivQMBMnMtwrAjIETIdg5gADmjiu3EsPO6PZ2RXYDwNBKfz9cjQkLKdyV94EX4lKQSwonG+rXXVw1JKoBRNABZ7KkYdTzbOp/7fwWXy7qUyZCQTHGStv0rM9ZcixYDUsAU51jY3mOpFDo16hm+zZOfe/Y9OGnG5Nt58pBSPf5HYHvro4eZfaKQXwLakWg0BFjiLHyR3SaDHJgHIQRNP3blPHlQb54OSbFtTSCRzQpkDtoetcZegtXHGh296jQlOeqIp+XeuUchNq/U6jE1WGt64nHeLiJh1sN+nOG7lrk9zZHyT96FDiD8kceA/YULmSQcl0HX6iJXUs5nEHLHTR/L/WJ2H1HaGQ==,iv:YYmog76pOUZT57ZPq5HfRSYCln5HIQ/M/8y1jH6JoOI=,tag:M+X4ATeqe7nPOSpSJlNwMw==,type:str]
13
+
k8s:
14
+
crt: ENC[AES256_GCM,data:YJ76gv/LVVlWDOpgSu21mhYQI2hddcfJGwPce7mFKSpN/R1nGPaPICDeQbNQ0D35Z4wQR6PlNTjzRppZ6NLb4+EC7HOC8sKurCe4yTXsHZxhesd36e064bUnuyUWP6Dqm20YF5Eby3UAgB9JNjfKo4HyrIMXO9zb/JeuyjYovIWGW8DPMmzHaxCJndkrF0aVBqCjxFt6EMZgoEg6z4SepC2ZXfZKr4/hU/qKCHYsOgHqy87pZx2R0SX4U3ZHKwdxnK22ezGIfYx775pTouTvNUadNGlsUzHdnr0nLGjV/JXrprR92ffMCkJNuWZ0/DywasHvGaSEwUaw5hHvpMTmRX89T2JxAYy5vdsGz9crxiinAKltOs9NCCCnIaI42BxaL8kfu/S9d7QTwbQr7G+n3RrHFvpXh61zvKI43JQPtEA/lLHYBSUJfGfvpicoHXVPl5g/YJCe5Th2sOR4BEi0ucFdKKUh30wCcZHzyCIZYyS0qwLkwPstkAF/ivMSP72WsvYbhY1bYb5pNQiZ8+3xy3QzU+FgTF7du30p8/6d7UxbW1x4qg6Bl+oTxqAZKCwcUaCeGmeMopdKKt8IR+/x2suphr57z5IJCPJ+uaMeDJyWkDfSqgDJjpLo/F7nRZp7NWksqDfMAdHVNsqcINBSMH0VyMPd5SrIOVAOhmeAqT/wEoOqira6SbKS44m0HBvzqgEhir1H4JGBrM8Qf71ruqjF1VBrZxap6n+QDfMffrmxjd0V/vBLnfi0kVzTuVyheozphJ/IbodRFT6W8l6ZTq6L8bxZ1v4BrnWbx/dfmiPhWEi8aIrHabyL6BiiatvyOXD8cTJ6XlbPwtDCYvNfeouA2HddMBQDGQLNpETo2GxohuVnvprUyANP9JEGzcA94uXnqjO32O9yONKhTmsj0AGm4zVCpzi1y7tzmGn9n2BNeK91ezMnB4OECN/iLGMZs7lHoNN9R+kMI4Vo9GJVcPX6q8ctZuK975LBEB6D/FjQLjKT4NSyYzyb/ugoq1l/WTJ6pWZqwnEJXZkH8uo04OwR5y36KS75kjgrZg==,iv:xby9LylCUqWCgw39Evac4pBAF3mMw6/E5KQVLs1V684=,tag:+vtJ2LZnCarENXLofSJGEA==,type:str]
15
+
key: ENC[AES256_GCM,data:laDNWqATzvhmQY3A5zGuShopdwmBRfxgxb4KP8h9WRG2RGXf1+q9zuP5c/+MQpEQqi/9oos4dfR2h5A3XfNXKlhKPgYVdNMnzqUje3AdW1tJ8DY4VXa4TzvXupD45KCJNzsogA6F9hEHRZmOeovInrQss6vBTKh6FcmzjOigUyjl5AEaURtmlv9Oqwqj/s8MsMWRu6yRTDsHldCeR++rM8Gl9D2g3k4sqMyy7MsxaNrYPoysblHSTeQUG9QYafmBCHWKqQ9559t8tdc5pa3rwG1l1VHBZO9TBkBUbuo8JIdoRJyShE3KeAwbPBSIWGhD215eIPYREykofaAOzxQGc6IBcqRuWjN8YOKe99C0XTb+rKuf2tYquJwlQEG6TkA0lr4HcGjeb1cSzqWXhsi8NQ==,iv:1EB1QNX0CVzKyYiJUYXqpG6qQ+n/wozS9H50fzVyNi4=,tag:+UpPldFVrkVatDhPJKBx4Q==,type:str]
16
+
k8saggregator:
17
+
crt: ENC[AES256_GCM,data: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,iv:UzeF/wEbZt8eu7lt4R/NfyP1pdghV+0Mhr73HU1t7gM=,tag:a/Xt1JLO/+VDSieCvbV9iA==,type:str]
18
+
key: ENC[AES256_GCM,data:v05rxXFPPy6ffFTFxqVrhXk47SXv68tNF8r3giDYC7NojkUU0dWCiCVmrhgTvMLKfW0z6u0aCWEO2W+qC7lHx9ySVTeTNPEIiydxxjEaT0G3sonrP0LdSChP9EwC5TxvmWO8+8iwIWblPVnCnNQMp5bhGjUbRrEbMUdk3YhdAH1G6y2ByKlg9qkBa1AkwEwuWRsJWlfjK2TYHSty+ZMZEgGk2nGxb/pyCk6Gdfp/3O0bLWKgwIZ+pJQcjQrFUlYLjRMxiBsiDs2vnUOORBQIn9OfwxFAsFu/IxuCDp+McEhhMHIM1dfPquoZpT+Wba46ZR/H62I3DqStL887G1oqCOR0IDz+LmgGQc0RdQXNZzJw8EKHXKWj73yBJMtTruqMklBYGUCs0y48THAVZMgdlg==,iv:+l6P18xImjBTq9hvNEtn6tFNRH0Jhj9Pwo0YOuxw42w=,tag:fZDOmYTXcuhQiQ1evp8XtA==,type:str]
19
+
k8sserviceaccount:
20
+
key: ENC[AES256_GCM,data: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,iv:3l0915FTZR0rBNmj8HdnGg2xOS0BvqMBMKv3DMpVEHk=,tag:70KKwl2kCk2CGrQSOirI9g==,type:str]
21
+
os:
22
+
crt: ENC[AES256_GCM,data:i+ruoyIwJAe5cMNfvaQFbD6WGQg/nkqDulp9FnyQzc+ra78pl6bPcXgZWpvEYW+TVJPCvuBevjWBW6IbDRbeS+U75o7+X7QeyE7C2h45eVqNRhfNtl1vtMlVHu6kpibTH9ZuwdgF5BD06+o3d1AIZulMgyKhk/6aAV2hK26zoo/gfIRPD6eYwnExG9xI+hInEtKPWN1TKdD21wpR8VJw5TJjcd5+tuvQLQJKTmSkviOQrywJQyi3qxogAr2UqVeheWAdif6ozxJwqdJlAuvciQynP4ZERnmpPo29ZloU2TywRWoCDh4iWNL0pTC6eaVBlSxu/L2x31VBx4SD1ziBQw3bRtwUeIUNK6NB6Oa2o2mdxIgNAOtAJdGK9parppXYESKovd90XqhitvTy63Up3F6m6LmhQWTBgcxLkNGsN6eHiqokOWjbkcn4p0CQQEcrWXVoXcOdagnh8W9XrW1l7SDRmBAB+NH+NeA/vUt7PNgqqup/npxTqfXfw87g41uH0twsHVjjXPlTLRLqv2AQUzG/g30VHKEB/KpundmX3phsPFVlKpwnNZfFwmnzqsdTXkWoqznwL1YG4APIBswzYMvAMFAPG/BEeSirBuPgDFcYvUwO7UMh0KDFQ7Jp9z/ftQTqlN1weN0OpX6yV3BJkm8/MzE8/ugCMZGpeli7t55gBsQYSjHWpS4a0MD4zakJe6xnemyI0UYC+SEeSBEjoosFZKOxU/HAXb3q5KFQFTzYTh3jX0LV/3sooIwV9DxAvJv1EqM32ZAwMXI/TIrozajrgMoc9B3cER5Bu5Uq7m8kLMb/SCUht25ppVzxpSQe/wm7a4W0hxAeUXYewiUBLYxYpZGecJkPAIyYZBGkkTZojgPC,iv:YW5YjZ7Aa7h7oMKT9Q+dGRPiyjaYzgcCTw2+HkhXIEg=,tag:wdlmwfQWDYtGPRErZ5dCvg==,type:str]
23
+
key: ENC[AES256_GCM,data:f+bnq5NSh9ykvXL+cjrpvY0ccHhgrkB5v73W/JIGPTtJkHAxGKRv0qqEXg6qvYbVABjk6J5/QX+/piY7beIIV4Jt1kicCh4M4xWVj/FrIErYv0gYCIuaq3NFTqKnyDr3z+jwmg2KrrmQ6V5ilE17O2ZItmk5Kuc7wWV0qXvKlaVb/un/PSaouCkxjRplYcADNh/0shibDdZn1rUU7JCqJ56TYFdQA7m9h0GIP+06LKqS8WPP,iv:Io5+baCfoPjtAJQ5EtByZ9ZY52T9R2C4/TV4/cio5YM=,tag:RYj5DZFmC9f4QWII/y5baA==,type:str]
24
+
sops:
25
+
age:
26
+
- recipient: age13u6nqs8jgp268mya8rht9gyhu86cc53j74f5va65077rsrvkr9gsjeqk88
27
+
enc: |
28
+
-----BEGIN AGE ENCRYPTED FILE-----
29
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1WVdNOVJ1VGpOOFFnbnFH
30
+
bWpFVjQzL0l0ZUdiOU9QNUNBVFJPakJHQUZFCmk2cm1Tc1dtc2xpZ1RBY2diT0Qz
31
+
UjFjTmNMWVF3Z0pTekI5UzUyOUhIOWMKLS0tIElrSmpobW5ldzk5UU8yaGRmVFoz
32
+
WWYzeThKWVIySkxHWnhwdXBpbHhPOE0Kx5b0BeiYIbTEtuQ0ZkWWwD2ZST+meeQA
33
+
WS70Rnyej62Nu6pcKlsFokAbioR+gQXhVOleFW+z3o+d7ARIq+xHow==
34
+
-----END AGE ENCRYPTED FILE-----
35
+
lastmodified: "2025-09-14T10:25:35Z"
36
+
mac: ENC[AES256_GCM,data:Y1aNN+9VknQT6IJyTovwx3X69LU+2yg2XjtamwISlV5PvGYhcktvnRNGJJ85z6A9yPu9q/m+MQ4eodgCadVi3mtHAV/eVJxvZUBZAn0TSepCwbNfKg8OaoUCiQ4hUDFvZdzyahuaXj3Nh8AhB1PdZLWLrhdYw3EHjf8mgCdgbWE=,iv:Ytp+4FYABX9oQcxV8spDfgMEAPylhOR5yVO8U+W0yuM=,tag:YZoM/wBNxzUPV7hrKaurjw==,type:str]
37
+
unencrypted_suffix: _unencrypted
38
+
version: 3.10.2