Encrypt file certificates/certificate-secrets.yaml by Age.

2024-06-20 16:56:47 +10:00
parent 7d52a93689
commit 2c71679132
2 changed files with 30 additions and 30 deletions
--- a/certificates/certificate-secrets.yaml
+++ b/certificates/certificate-secrets.yaml
@@ -0,0 +1,30 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: certificate-secrets
+    namespace: flux-system
+type: Opaque
+stringData:
+    adguard_home_certificate_email: ENC[AES256_GCM,data:fv730eyP0toXVFfQRRiFdo6tVw==,iv:bayGrYbA2+HTK3tOE4J66adzmE4JwaALxWV8Gv8ET7o=,tag:0Gc4CwrW8bZIKzvX5lgAbg==,type:str]
+    adguard_home_certificate_dns_name: ENC[AES256_GCM,data:HXnMKVnuJuzRRbo44+K1tBUDVpMIMesmvP8U31hBy9wY2g==,iv:DNs5jp7yyDYKyE5WPQuYbQxT3Ek2FvsHWzRI37XLpi0=,tag:NoDtRzMnpsYyT6CgB+R8nw==,type:str]
+    adguard_home_certificate_tls_keystore_password: ENC[AES256_GCM,data:z1TSy5lrlbcUmYkDA8wIOVlBqB8=,iv:Cm+Pv7FZQOU/lUhBV8fzTCpMYGHOgZzcWvW7L66AlMI=,tag:iekdxH7SxjMeAZGFl89q7A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1d47q8mlty404pxx378q49hr93aqexca4mkeqtdm00w4gjd09xd0qhxcdcz
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlZXdKS2RnaS9qcW5jSmFC
+            QXJzTXBJbWJtMHlGMzVIeGtnUWladWFES3dZCk1mQ0VYelRuQlNRaXN4ZVFFMHFN
+            cHREblJPZWMzeEFaeUsrWTZFOEVYcVkKLS0tIGN2ZkhlcHoxdkZ4MTZyL3dNVlVJ
+            VG9obW5pTUxkcms2RDc3SnpuSHNJUVUKRUtGMbWPqdf5PUhYkiTMYv2L/QBu4ePJ
+            TmY/CU1/7EOCDgca8T/P1XzDLnaIgDHjIhB4a0zvTqnV9eX1jFcP/A==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-06-20T06:56:47Z"
+    mac: ENC[AES256_GCM,data:HLSmm+vsp9VPmbET7hsx3YZG8A0steZTGLYP16/NU+BWm+m/mU/3t/2+ZXGMUtwwsCZdLTyNfVUQGLdgvvro+PxYalZ3HfCdAdegimLK7K2feh5AtxpyknXN6y5JJvoKGKAXw+8c7sMl7NKC4Z5e9C23viFF8w9YTQTq8y2mphg=,iv:Ck3HhxLoL2N9E59KPiq8z1gKy8JOyMaLz2KMLk0Esis=,tag:BicesGBePWDI+lsPfkfCkg==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1