Post-X-Society/Post-Tyranny-Tech-Infrastructure
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Post-Tyranny-Tech-Infrastru.../secrets/clients/test.sops.yaml

36 lines
4 KiB
YAML
Raw Normal View History

Add Collabora password to secrets - eliminate manual step The last manual step has been eliminated! Collabora admin password is now included in the encrypted secrets file. Changes: - Added collabora_admin_password to test.sops.yaml - Password: 7ju5h70L47xJMCoADgKiZIhSak4cwq0B (encrypted with SOPS/Age) Now truly zero manual steps for deployment! 🎉 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-06 10:47:02 +01:00
#ENC[AES256_GCM,data:Q/lwFVpvUfeCy/Twc7nl6wEP5lBBmyJbGg==,iv:EubkKfxpGJCyA0uCdNNIBySH/v+Tscm1bc4QgnUTgOo=,tag:xoM+wlOeXwGxoDOJLXqGgQ==,type:comment]
#ENC[AES256_GCM,data:ZQksQwwtue7VMvBQfRNqZ514FA==,iv:HQVgRUsr/5AOiUExT7iiJHrJu/+7d2l57z6/igU4+wY=,tag:7QXlOcq0WHAB6hFs+QTNCA==,type:comment]
client_name: ENC[AES256_GCM,data:/BZHmg==,iv:7IeV5Bzd6qehSKJ6iSj/pIHGslnlN0gGeUqkh/beeFQ=,tag:Ofp66KO31ZxISJFk7txA2g==,type:str]
client_domain: ENC[AES256_GCM,data:WN2B4DLb6XC2LJcEeEDyVg==,iv:gndlLsWmeYr4/ZEljIiyPgimWXevAqT4Q1wzqzDBcQY=,tag:OxSsvoENyySHUblcZ5ausA==,type:str]
#ENC[AES256_GCM,data:NDw1kEUxoZEQCD9gVfgf,iv:kUrwP1Dh5MDYKAAo10HFvfmVePg9uK6I9YoiYois0yk=,tag:1eaWPq/oY/+pBEvmSud8Hw==,type:comment]
zitadel_domain: ENC[AES256_GCM,data:hUxZDJsH5JkxvavBQoF/TcbuInr1qYtY,iv:goM1upJHZwTzONxbsRN84215kVVG1xJ6rlj70uxx6SI=,tag:P7DP/hLoQxg5R39RTVTNPA==,type:str]
#ENC[AES256_GCM,data:gYi2rwO342Skgc3rw3qdnA==,iv:wmxhtS7P8w+axjrditt9ScU5tkNAemzjRcMeNGE+T/4=,tag:oT6IlVD4ToSxcjo5DRc3qg==,type:comment]
zitadel_db_password: ENC[AES256_GCM,data:lAoTeeUjECcnrxHlc00RNsN3cvNumwOVEe9brYTeDa4=,iv:BKlYFA+33acfO2D6I6oFgo6nm58xfdXNQl3pFLufEj4=,tag:/Ep8jCJX+U4/2B1dFbQ4Ug==,type:str]
zitadel_admin_password: ENC[AES256_GCM,data:dYA8bDob6lhQ5IOqlLoAic+1d9UNVQ==,iv:wQeFeIKvpL4wE2MTX66TxZCnDz7Dv17pCfPds672tXk=,tag:tPq1wZ9QTndZt+RJJyNnNA==,type:str]
zitadel_masterkey: ENC[AES256_GCM,data:7MVT2DYa2s+7pu/4Lm8/OpKgSSINCR4TIZpO1LP83TE=,iv:dMi30pF1kMkMETk6onwpkayOl9rSf0BrOpdiq5MlNKg=,tag:/VNcnA7VLDZrivjeqddaqw==,type:str]
#ENC[AES256_GCM,data:kFHCHc0KIjOP1EAfOUpVwrpH,iv:jCGrBXZFjuSwCqwUcXDZDq6OWabVovu7iWotzBVHdlE=,tag:tG1ys487AJ2pVo2urBbWCA==,type:comment]
nextcloud_db_password: ENC[AES256_GCM,data:v1ayX7Ne+z3nd0pipZMrfwMbrtRh4Ngx/PAtUvHD+0g=,iv:0fFfBgn1WsAnsVJdXNP3+c6UOQLNTMrjsMjHKfNq0BQ=,tag:g0Kw16J7e0I+6fKOXphkug==,type:str]
nextcloud_admin_password: ENC[AES256_GCM,data:fyWDQ3758/WMQ0+DXJCOFHp1,iv:99ESBFw2araULr5Hv1YQh0N7pCosW3Dykc3/Zmoqsmg=,tag:hHi2GVmR7OkzHirMBhOqIw==,type:str]
#ENC[AES256_GCM,data:bAhTUt5rTkJZPIZOBR3RZHjR5ZiCpfEoYA==,iv:OExqVSgygSz6mT2j2XgClfWvGAtvsErn7xdPapgBbQM=,tag:rMNOMX251kPthXdfVcBUSQ==,type:comment]
collabora_admin_password: ENC[AES256_GCM,data:rXziO/BtEO+KiIbjL4Uf6tXGn49UpPeZUZmU82M6xlE=,iv:7InVwwGhQMNnxqEKOTOyrCpEd3EKTp2hhtHvMbeFhX0=,tag:8RbMGiLzmbAgtRX+koZwPQ==,type:str]
#ENC[AES256_GCM,data:Ed+p3wfimk5aNASY8RJyzm5ubz+cTGvgZVYsqaWphnGxaA==,iv:40wig39NTxwrWrY+Ubl2xMoGNqSwRJjIRNKC1Zcwgh8=,tag:PEkGrwmZE4G3YGpP4uPWiA==,type:comment]
restic_repo_password: ENC[AES256_GCM,data:0iWgE7yTYutp/Rrcvw+2gVe0AFXXK5og0dHoreOVSqo=,iv:NGQd52wjQ7NRGmCi/Gc+lYIBsbcnVp66iX0kGMYIlBE=,tag:sCuk9uwo7uL6zXGJHvWWAA==,type:str]
#ENC[AES256_GCM,data:HmRr7Fi3uwWAXMtaVP57xnY6kTOe5WYvm+l5Km55LQ6LS5+k5NEe5rKZsGs89d/8zmTUrewGv6vZt+GkgEI7FHlLnw8=,iv:RDveuIjydLzooFMWyevRkb3wYNBz/mghzGY3UlN8sKI=,tag:rX+TE5RZKm2PfDRrkAZtrg==,type:comment]
#ENC[AES256_GCM,data:1mUo/CRABlbhnxNdh90wB+wxij50vo7cI5YH9wU=,iv:gDEaqcp8WTYyMg8orJv4bmyCDvp9N7PVmCJ2l60FN3Q=,tag:k5w7ozwpBkn+h1izH+aoLw==,type:comment]
#ENC[AES256_GCM,data:M0JfwHFJjO+ATbMbmTQZXRDwFniitZzGxT1AoVJRprbC,iv:ROCde6FpjcpWN24h8t/LTtewq79Aj1I+TCFg4cgYMNw=,tag:jViSz2fkui1Fkqf8mIttOQ==,type:comment]
Complete SOPS secrets management setup (#5) Completed Issue #5: SOPS Secrets Management All objectives met: - ✅ Age encryption key generated (keys/age-key.txt) - ✅ SOPS configured with Age backend (.sops.yaml) - ✅ Secrets directory structure created - ✅ Example encrypted secrets (shared + test client) - ✅ Comprehensive documentation for key backup - ✅ Ready for Ansible integration Security measures: - Age private key gitignored (keys/age-key.txt) - Only encrypted .sops.yaml files committed - Plaintext secrets explicitly excluded - Key backup procedures documented Files added: - .sops.yaml - SOPS configuration with Age public key - secrets/shared.sops.yaml - Shared secrets (encrypted) - secrets/clients/test.sops.yaml - Test client secrets (encrypted) - secrets/README.md - Complete SOPS usage guide - keys/README.md - Key backup procedures - keys/.gitignore - Protects private keys Updated: - .gitignore - Allow .sops.yaml, block plaintext Tested: - Encryption: ✅ Files encrypted successfully - Decryption: ✅ Secrets decrypt correctly - Git safety: ✅ Private key excluded from commits Next: Ready for Zitadel/Nextcloud deployment with secure credentials Closes #5 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-27 14:23:36 +01:00
sops:
age:
- recipient: age170jqy5pg6z62kevadqyxxekw8ryf3e394zaquw0nhs9ae3v9wd6qq2hxnk
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
Add Collabora password to secrets - eliminate manual step The last manual step has been eliminated! Collabora admin password is now included in the encrypted secrets file. Changes: - Added collabora_admin_password to test.sops.yaml - Password: 7ju5h70L47xJMCoADgKiZIhSak4cwq0B (encrypted with SOPS/Age) Now truly zero manual steps for deployment! 🎉 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-06 10:47:02 +01:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlSStxVFdTTjBzSEcvMDlx
azRmeXR3SmRkbUthWGlRMEJ2S1plV2tocHd3CjRPZlhQSjd0Tk9ZUkFxL2VsTlBR
SlVzbnhhZ09OKy9Ma1hOSmx3TjhHRDgKLS0tIEwxQ2tobGMwOFIzSGtEbks2ekk1
VXU5QXpETm53Y2h4eWJWR21GSUZ4UDgKjQLyBMw+Bngyw81/L42HZE8OwC0f32QR
/rA/hasFyz+tnX5cbxzgajSswzuhZXLLfZb9s0g0MzGo71SZ53gXPw==
Complete SOPS secrets management setup (#5) Completed Issue #5: SOPS Secrets Management All objectives met: - ✅ Age encryption key generated (keys/age-key.txt) - ✅ SOPS configured with Age backend (.sops.yaml) - ✅ Secrets directory structure created - ✅ Example encrypted secrets (shared + test client) - ✅ Comprehensive documentation for key backup - ✅ Ready for Ansible integration Security measures: - Age private key gitignored (keys/age-key.txt) - Only encrypted .sops.yaml files committed - Plaintext secrets explicitly excluded - Key backup procedures documented Files added: - .sops.yaml - SOPS configuration with Age public key - secrets/shared.sops.yaml - Shared secrets (encrypted) - secrets/clients/test.sops.yaml - Test client secrets (encrypted) - secrets/README.md - Complete SOPS usage guide - keys/README.md - Key backup procedures - keys/.gitignore - Protects private keys Updated: - .gitignore - Allow .sops.yaml, block plaintext Tested: - Encryption: ✅ Files encrypted successfully - Decryption: ✅ Secrets decrypt correctly - Git safety: ✅ Private key excluded from commits Next: Ready for Zitadel/Nextcloud deployment with secure credentials Closes #5 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-27 14:23:36 +01:00
-----END AGE ENCRYPTED FILE-----
Add Collabora password to secrets - eliminate manual step The last manual step has been eliminated! Collabora admin password is now included in the encrypted secrets file. Changes: - Added collabora_admin_password to test.sops.yaml - Password: 7ju5h70L47xJMCoADgKiZIhSak4cwq0B (encrypted with SOPS/Age) Now truly zero manual steps for deployment! 🎉 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-06 10:47:02 +01:00
lastmodified: "2026-01-06T09:45:43Z"
mac: ENC[AES256_GCM,data:5hbnT8BUc0zOPnTCEudbXKAEgaoaj6TX464HM7bwmkfQ9Wm9Xp5F4YahEw4ZDNsBQ8/IYUhAbtne7JhRdzhxb9RaXZqnyv0D5Hvpx77OOVvVWogmGG+Sf6oL84KQW/3EYArXND9LRzaHLd6lUlyEKfmySWeQNxHhW1M0yxEm0nU=,iv:tdO17Gwn5r9D4lG51Tww2lHla24gT1nUerXa2yHLSG8=,tag:AKf50aaT/14m5pj6bI8eCg==,type:str]
Complete SOPS secrets management setup (#5) Completed Issue #5: SOPS Secrets Management All objectives met: - ✅ Age encryption key generated (keys/age-key.txt) - ✅ SOPS configured with Age backend (.sops.yaml) - ✅ Secrets directory structure created - ✅ Example encrypted secrets (shared + test client) - ✅ Comprehensive documentation for key backup - ✅ Ready for Ansible integration Security measures: - Age private key gitignored (keys/age-key.txt) - Only encrypted .sops.yaml files committed - Plaintext secrets explicitly excluded - Key backup procedures documented Files added: - .sops.yaml - SOPS configuration with Age public key - secrets/shared.sops.yaml - Shared secrets (encrypted) - secrets/clients/test.sops.yaml - Test client secrets (encrypted) - secrets/README.md - Complete SOPS usage guide - keys/README.md - Key backup procedures - keys/.gitignore - Protects private keys Updated: - .gitignore - Allow .sops.yaml, block plaintext Tested: - Encryption: ✅ Files encrypted successfully - Decryption: ✅ Secrets decrypt correctly - Git safety: ✅ Private key excluded from commits Next: Ready for Zitadel/Nextcloud deployment with secure credentials Closes #5 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-27 14:23:36 +01:00
unencrypted_suffix: _unencrypted
version: 3.11.0
Reference in a new issue Copy permalink