this repo has no description
0
fork

Configure Feed

Select the types of activity you want to include in your feed.

feat(infra): add encrypted secrets

+29
+2
flake.nix
··· 10 10 { 11 11 devShells.default = mkShell { 12 12 packages = [ 13 + age 13 14 ansible 14 15 ansible-lint 15 16 gnumake ··· 20 21 opentofu 21 22 pre-commit 22 23 shellcheck 24 + sops 23 25 temporal-cli 24 26 terragrunt 25 27 wireguard-tools
+7
infra/production/.sops.yaml
··· 1 + creation_rules: 2 + # TODO auto manage age keys, currently have to: 3 + # - run age-keygen 4 + # - copy public key here 5 + # - copy private key to ~/.config/sops/age/keys.txt 6 + - age: >- 7 + age15c5rpksj0u27sp667525zqh8dhtd70rwrlv7xq2hqhsfaempcdwqu3unel
+20
infra/production/secrets.yaml
··· 1 + oracle_tenancy_ocid: ENC[AES256_GCM,data:DQPku1J4WEppuhxP+gFcf7LZ3jXAdLjgr6X3RpKYSM/aF2cnsKqr56CObLLtUje4C2mmgyoFQebCfSuhjV+2+jj9PdecUBeka161zW20xA==,iv:Kr1yfvzjnYopcU4LrTEkLbrL5BWnCAmpoy9YFe39IPM=,tag:xFmBeYRoj9KqmuuzFIAzpw==,type:str] 2 + oracle_user_ocid: ENC[AES256_GCM,data:GRDrBHRz/W3AEt/zixn6n+ueqSNDtZFB4EBto2TQo9Rik6vWr2kSbwq2UYX9bYCPMlLQrTrT/L2tv8Ln0KJIC8O5zuLLAN+LkBLYZQ==,iv:L7YU03HE6aQTjczSz/GZH3YFL3sgwPyomoavRvRuqso=,tag:86evG2ijpy2b7/v9rkg6PQ==,type:str] 3 + oracle_fingerprint: ENC[AES256_GCM,data:HL7NqWBTJ0f9hXfA9HyyMDErLMDbmK5QsyMKr2Kg+w8Qo9h1891+KuhGpe7K+SQ=,iv:vBak+FMghPYeuDbtfzMyEeEPfdQtbvpUXEVJGfzqslY=,tag:C057JRlVzWhbOoVUee82aw==,type:str] 4 + oracle_private_key: ENC[AES256_GCM,data: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,iv:bnD6WZYwF63KI6Yn3EXvTyke1OLafPDhB1iIyfJ1kTs=,tag:Nym7Xtk6hJD9GWHSLGYi2g==,type:str] 5 + oracle_region: ENC[AES256_GCM,data:Dz1UpFhrPNBDatU=,iv:vR9uUF7hOz/u5ICjm9H0fNF6GooBeOtXCTVmQZi0M7s=,tag:939nIJTpkL5gj3WEFRFb3g==,type:str] 6 + sops: 7 + age: 8 + - recipient: age15c5rpksj0u27sp667525zqh8dhtd70rwrlv7xq2hqhsfaempcdwqu3unel 9 + enc: | 10 + -----BEGIN AGE ENCRYPTED FILE----- 11 + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzRUNOT2pDaDJneCs4RzdL 12 + VDRHV29Dc21Bd1ovNXJWR1U4UmYvd0kxUlFrCjdpcFlvVnRWakljQ05FVFNqRUpC 13 + Y1Fpc2c3RENCemUxWUVLamRKOFRLbDgKLS0tIGRoT29NNkp3V3pvSFhmb0tRalMy 14 + bzdTeVZWYVIwM1VyUm5UM0pQZW5KYlUKWw7Fq17anbkfY6U3HCr00OKEfffRL/TM 15 + zvtvDaWLg2ZilP7kWM7YbqyTi4XqjLXKldOblwIcF7qA5E/OfbbzXw== 16 + -----END AGE ENCRYPTED FILE----- 17 + lastmodified: "2025-06-12T09:39:26Z" 18 + mac: ENC[AES256_GCM,data:0UYtjW2nni3ky08VNKjayDZwbWcm+H9QkZKKVdr946gBpGiYbqi3akWdjoCcU/iuuW2V9V+c+7FmcWmwMQapEQ2czOwKpcCGxxLPNdHbD1R38JHfLAbDZvaxYYvdNniCpGYnbhHqbFhK+XvJM1lO6cLPBckU8n82+xCQP6UTVk0=,iv:3nGawdVKnggH8R2xPAdlliI+B5Cj2teZaIii0ho/hSw=,tag:OFXUDMVePc3NG1hXjIJWSg==,type:str] 19 + unencrypted_suffix: _unencrypted 20 + version: 3.10.2