finish nomad, add consul, sops

2026-01-25 06:32:08 +00:00 · 2023-11-19 21:19:58 +00:00
parent b6798b62b5
commit b741a36211
12 changed files with 476 additions and 263 deletions
--- a/secrets/host-secrets.yaml
+++ b/secrets/host-secrets.yaml
@@ -0,0 +1,57 @@
+consul_encrypt: ENC[AES256_GCM,data:SXOUCI7VytPdTffb/QLjEu+eu3bKim7Hqk5cQHWPBhs0ludnWsivL076vYY=,iv:lSAANYT33+qnQKuKnQ8Yl1mjGsRuDLFCr+dlxXxyflA=,tag:OQg/AM7MN4xY/ELwZl4ikw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1jvqe2j70h97844nkz34z9k4epx3uahx50cx75ss8mty2dnxlrf7qqv9a0g
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArcGNQbHNXZFQ3bTZYUHNW
+            bWUyMElwcVBqTFJFV1Q2Mm1YSW8wR3NnbWxZCnkxRDRuWCtBTjB3MlpNZTZsYmx1
+            SkVOUDd6RFRxVHBla2xUV1lwYXJ1WFUKLS0tIFEwVkJqYmRBclBTR0NyUW9wMXE3
+            NVNFa1I3Y0RFYW1lei9JOVp3eDVkc0EKpd8JLzE+XTJcRhT1kwF0SQTt7QmOWpLF
+            C2+J/gFf/8H43tRD6MxpzgSTJ/480mshnrlnAX6yqgn/CMEP/XrEVA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1jvf8rd8krchw3ph0w2let8clvyuzcdhq2ug6sm7tx86refc2z5vq4w6lxr
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBadXR3OCtWRXZTRW5jaFVQ
+            RTZpa05nVHIxS2FYaW10TWxnYlpxc3BENWlnCnFXL1FZanJvc0FmZnVYcXlVS29Y
+            dHdHY2dENSt1NGl0QzlxQkZCLzkyUEUKLS0tIDRNMXowUmZmZkdvUjhaVjdQWnBF
+            N1E0djlJVDdjK0hCbTdZSSthWityUFUKhAj6O0Ss+ZzJ65as8WT++9VIErPRs7hX
+            w9cMAzuaq2BJrYuZqbMdbDqmgMoBMu3CX2TieIjCsX/5IGr8mqxH2Q==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1t6zzuxzzlfvqfhcvj3vyngfguxrw960c5u9hjwd05k5q9zp7l3gqyjatew
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhSXlxalMwcDdtcUllY1Rn
+            U0JEYk5UL29qdzFkTTNHQXdFSWZWWE1YaDJrCjB5T0ZEM3dYMjlOZ3IyRGRrZng1
+            cndYRENOT0Q2VFg1WDF5UG1zLzQzVEkKLS0tIENoeGxyS1dlbGF4d053ZlVTTE1v
+            elN4aWU1cVN5OXNobDhWN1pMelp5YTgKZXi4Sru1X9QMQPT2f7ryas/WmB+etVN3
+            /liTOTpUP/Ea7n1T0blO3XvDqLeKHLhKUwQ0S6JTAPZxMRL16ia/sA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age187fdx6pc2559tjh03jrcwp6yj8whd70h666g8a0ptyr0z49tfcsssdx6au
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2YkM1LzlCWEFUZmQwcEtQ
+            eVBaV2lNeFlTajRHZWU3ZWNXYUNMbUxMRlFJCjJBLzQ1bEptYVYvbzhKKzhuTi9k
+            Wk1kWlpINS9NYWFRajFKWGNkL1hBU2sKLS0tIGU4cVVIVTluOTRUdE5GbXRTVlhT
+            dUszUWNQUzJxdndJTUlGS1g0amdjb0EKz4Uem2Z5lj5LJcOOFMy8HQWQSMVRiXwm
+            UeqbLYqgQ74ThpQoH2HfBIjCoacK1u1+StEzOeVXaT+o+a0WtOfnIA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1m3zny0wn4smrwhjrvw8qay8438l06v49h0fg4s3c6mpjyuq28vwsp5wvdk
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjcW9xOVd0YnVkL0JheHI0
+            WTBoOFVzTzhZS1MxT1hFWEZ1cUl3QzFZeWljCmpGWUh1UHVpTXJ5dWd1OVQvNllj
+            QXg0MTFuY1NaRXdyWVc3M2M1alc3dFkKLS0tIHE1SytvR3Z6MWZjNzhBY2pRU3NU
+            bVo5cFZ1L2dSaThjemtsMUcrcURla2sKM+nUlPzQwdCK/8gt19qi6PX0tMEWuol+
+            5QOPqkjklkFoiBFKtpHOpW/xnzUQWo86HM84G1NiMsAotWblGEPK1A==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-11-19T21:14:46Z"
+    mac: ENC[AES256_GCM,data:TeiGhX9oHxtSSxXxYJORFVxfam8rBtyu4+1w/uj8lzTwJKE9+fxQipMC0hKxiBR478Wxf22RSlkMR0Pb5x09FLWwFJcBmh7W5C4tYmAjM+Fo+ACK/lJndavbE0EFcWLhbm6RYRg86J/vxcyxNVJ8/gc0IE228p2EuqrtfnI87SQ=,iv:dJTSgnriZ9dHfzV4yFt0mjcq2vplTnmTTx3XCdTECBM=,tag:aWQH7y7Jcn+FoylF3IXpsg==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3