From f1f821b77c446b8e0cd6d92b8a792074ae81153e Mon Sep 17 00:00:00 2001
From: Jonni Liljamo <jonni@liljamo.com>
Date: Thu, 11 Dec 2025 17:05:47 +0200
Subject: [PATCH] feat: previous nix-ws secrets

---
 .sops.yaml                 | 17 +++++++++++++++++
 secrets/alice/secrets.yaml | 34 ++++++++++++++++++++++++++++++++++
 secrets/arwen/secrets.yaml | 29 +++++++++++++++++++++++++++++
 3 files changed, 80 insertions(+)
 create mode 100644 .sops.yaml
 create mode 100644 secrets/alice/secrets.yaml
 create mode 100644 secrets/arwen/secrets.yaml

diff --git a/.sops.yaml b/.sops.yaml
new file mode 100644
index 0000000..8f1d5e8
--- /dev/null
+++ b/.sops.yaml
@@ -0,0 +1,17 @@
+keys:
+  - &liljamo_gpg 848EEBCEE9F0D29D25C321A658577946A65EB712
+  - &arwen age1jqj4su4cvv3ss744qlxv0xmuxac5gtsf0n7xwkxujgg50hv624pqsf5a5g
+  - &alice age1pqjj62u9u3x658a5u47nf7uf0cfek2ht09ztqamjfl7j8s2xeduqx5cfnn
+creation_rules:
+  - path_regex: secrets/arwen/[^/]+\.yaml$
+    key_groups:
+    - pgp:
+      - *liljamo_gpg
+      age:
+      - *arwen
+  - path_regex: secrets/alice/[^/]+\.yaml$
+    key_groups:
+    - pgp:
+      - *liljamo_gpg
+      age:
+      - *alice
diff --git a/secrets/alice/secrets.yaml b/secrets/alice/secrets.yaml
new file mode 100644
index 0000000..5f21b59
--- /dev/null
+++ b/secrets/alice/secrets.yaml
@@ -0,0 +1,34 @@
+rootPwd: ENC[AES256_GCM,data:f/MJStmXqi3xtJ5Ytx9Ghhvn8WJU03Su+4rh2I3LLXjM2FTOQxEoh/MGP1p0kWcgMZ4nGHYiBkv30rffi977rn1FBGOtSrLFxg4KnK/XLhAydyDgMPxS9zfilROgw/tFXxvQSjmvsWIawg==,iv:QkJ6cvorNHoliCTyM/e7Eg4lrwusKTlmLvxglbe31VY=,tag:zV8NAr6f7HMle8X/GbXYtg==,type:str]
+skyePwd: ENC[AES256_GCM,data:l5v8p9LWmmjuaKeepUjwKbFwa0t20YQKa5N9yPZ8f3KTxTNU+v4NWaWKMD6/58h4fBYmx1ASvrxsy8XubDKFT8ZxY8UAbbqpECcB4yn92y8MHYDRZ4Hvay6Rt+a7b8hO8kXT3pnHY6IauA==,iv:p5RTnpPiAPMvGyZAJbm/uEL3z8n4z9rur6oQVFd09yI=,tag:1TxC3vlRKKkKVvP4eitsqg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1pqjj62u9u3x658a5u47nf7uf0cfek2ht09ztqamjfl7j8s2xeduqx5cfnn
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxMjVEelhGL24xdXN4Yytm
+            OEdBK1N2NDAzWXN2UW8zZHhEL3B5azQ1WHhRCnpBK09oVkNnbWpBcVY2cnVBdmFV
+            QkZMYjViMnJUakVGS2ZLd3A2anJSL28KLS0tIFVNcnRDbWZxRC9VUTh6QXIrRkl2
+            L1UrbUlZR2dtd0hUSWl6ZzVoaXVEVGMKzR3EgxBDGchoH2ADTx6pYorGzZDU5vOi
+            pZIxM2NusqPaSevYmqQZ7qx3TEHPaOimVgvszJex84MPxKqWPIspZw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-20T09:38:56Z"
+    mac: ENC[AES256_GCM,data:OVx04F+cnaFjl3ty00Nesp+l4pCQ6douA21XFU7F2BO5RB7bBPqDdaSeCR4OdaQTg3fze1GySK5+Em13aIuo1iApiZSSXhIVugFdKR+J4wclown10WWwfEQV173xtHTiKXNHTDH0l31aJe/W/fzTcjOKGzMUspMlv7JBYOB+MJ8=,iv:Y0yJ84OZUsuy9Bv23vK3qZdLkMBPEwcJZNFXa/omjHE=,tag:cyaBa84KwLGtJOlwB571YA==,type:str]
+    pgp:
+        - created_at: "2024-07-20T09:37:59Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hF4D8ab0ENzkR4wSAQdAZUP2pecsSOHt8BOXnlqlnbaeh14fAnVp4SiyyNtnXWww
+            6qSEQOlesOAO3KDQVIrCSbQ7JhJhqrVDDw8IwsDXRZ6tWU9fpayu8dezRylxYzlm
+            1GgBCQIQ82R4An/41ZtKuEtO0+Bq/0rxdJrDKjg3owiZNvVuGGykzUV3A0RKN527
+            AqWz+B81KjNGLcSQj0dW7clzslXnpluf5csdijR4558LlGPlPZdg5rzwOs0ThRfS
+            td0OFLngSJPKfQ==
+            =N06L
+            -----END PGP MESSAGE-----
+          fp: 848EEBCEE9F0D29D25C321A658577946A65EB712
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
diff --git a/secrets/arwen/secrets.yaml b/secrets/arwen/secrets.yaml
new file mode 100644
index 0000000..27652be
--- /dev/null
+++ b/secrets/arwen/secrets.yaml
@@ -0,0 +1,29 @@
+rootPwd: ENC[AES256_GCM,data:LnMbR4IstZqCDz+98+lZX8O2mzQc40t3Zf4Ka3wLOEuFExSn63xdH/PV2wLCUm2ufI95tpldiROAZxCifYhy9+Ls8E6GNqV0V0d6PkdyVi/9xT5rH23yOc1/dIYWbSZFcz4OlU+JPW81wA==,iv:6vm3G2cxIf/1oKxwZFtoYKCLt+ustd7uxBFEMSO9uPY=,tag:3/z0t9z54LGEY8HbIZ3G8Q==,type:str]
+skyePwd: ENC[AES256_GCM,data:QT4pp8WSVCJBZBLyBP35Rjk08xxE+osibBj1irOLzyuYNH27XvYTtE3IJ4WtFdtSbDiHDGYDg8ZIDF5Z8ACgFngWuL9Akw7FsPuTzqsDLm3Gmum1tgDGXd3TlEc1WNNyZlzEjcA2Zz5INA==,iv:eeNL/i5tL12QQ73FD02mBvQ8Rl/QkJGFsC3tuinw5gc=,tag:Aks+C0qXUHItfbhTiBaLgA==,type:str]
+sops:
+    age:
+        - recipient: age1jqj4su4cvv3ss744qlxv0xmuxac5gtsf0n7xwkxujgg50hv624pqsf5a5g
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnYmpFRzRMeTVWUHdQcXNs
+            YUJvMzFrdmZObElqenpReUQxZXJXSjNEclZnCk42YmIrbmswOTNlN21ZNzc3Nlow
+            YkxyTEUzQit3bjFrWDFRTGxOZjYrak0KLS0tIHVZK3VzdkRrVkNENGkxZ0hyLzJV
+            SVFMOXNtb1ZRZUlvNk0xRlJKVFc4clEKDnDfZRxs4y7abxjFLIFKt9F5GkMRRbfw
+            EjEhsuRP4ooOQFGI6pqONqxc22XHe+xFQspGWSHsOjtWrbG/Pagvgg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-12-04T13:45:46Z"
+    mac: ENC[AES256_GCM,data:h6/oXUemDGd8Niat9dAQIkfp9XnIeSwxJaYStCGOY57Tm+mvTURh0ANqN37uvb1BWjvMelRaGCQCMo0lSasrfco6ZDENwFO3GTVkMJ4P7op+lEN3/EvVw7EIpDz6s8XE5Mc6wDQ8qGH0ZPwap3qFKYZzIoTDSEn1Vmximp9Tpso=,iv:ibiSbvVD8MWuyhaT//dRR68bROtJslGkT+e5mTEQYr8=,tag:MNK8CQLmAQ9AvtrRdU5Low==,type:str]
+    pgp:
+        - created_at: "2025-12-04T13:46:57Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hF4D8ab0ENzkR4wSAQdAdGy4kQ8ODeIjuunqBfUBYbrJQcxK4XEMV1bbWYwVHiIw
+            WXwHrQejUTluIjuAUCKUOwizRIBK55ZQ+QBrjOgPBSYNAznFTshV7YouXVfXQixt
+            0l4Bin1yBL6yuIqbT01noj6b6rMUg48/6SB6/CFm8fq98omOvJEEjPaHysGya1RV
+            V/q16Ka6zNtWgQxswoSGrsituP4JpdZRNnzZ4i3QJyFqwrCbb0ofjbrCMYbz/3sy
+            =RWss
+            -----END PGP MESSAGE-----
+          fp: 848EEBCEE9F0D29D25C321A658577946A65EB712
+    unencrypted_suffix: _unencrypted
+    version: 3.11.0
-- 
2.44.1