Sk7Str1p3/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(users): encrypt user password with root key

Browse source
This commit is contained in:
Sk7Str1p3 2026-05-03 12:51:48 +03:00
parent 4fbff60171
commit e0f2ba3fd4
No known key found for this signature in database
GPG key ID: 4DD995933D06D43B
2 changed files with 17 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.sops.yaml
View file

@ -2,6 +2,7 @@ keys:
- &eval age180qx2rwyelak4wtdljcy9eqxkskfcfk4fvq26nuqqz8rtjdyyyzqlr8dt8 - &eval age180qx2rwyelak4wtdljcy9eqxkskfcfk4fvq26nuqqz8rtjdyyyzqlr8dt8
- &Sk7Str1p3 age17669qkln533e3plts9f3sfs3u4ra8c92ddcx2yk5fngzm4u0u5ls530vnl - &Sk7Str1p3 age17669qkln533e3plts9f3sfs3u4ra8c92ddcx2yk5fngzm4u0u5ls530vnl
- &root age1zmp979z20mga9suh4fvhxcp5fa6a66jwxnx9fsd7lh3kj607hg7qz3jpew
creation_rules: creation_rules:
- path_regex: 'users/[^/]+/about\.json$' - path_regex: 'users/[^/]+/about\.json$'
@ -13,4 +14,5 @@ creation_rules:
- *eval - *eval
- path_regex: '^users/Sk7Str1p3/.*\.(enc|yaml)$' - path_regex: '^users/Sk7Str1p3/.*\.(enc|yaml)$'
age: age:
- *Sk7Str1p3 - *Sk7Str1p3
- *root

19
users/Sk7Str1p3/password.yaml
View file

@ -6,11 +6,20 @@ sops:
- recipient: age17669qkln533e3plts9f3sfs3u4ra8c92ddcx2yk5fngzm4u0u5ls530vnl - recipient: age17669qkln533e3plts9f3sfs3u4ra8c92ddcx2yk5fngzm4u0u5ls530vnl
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzMml5VldXSVoxVjFoZVVP YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjckZBU2lCeHY4d1k0RU9P
cjVFM3RORmtzT0IzZDRiY3I2MFFrOXA4R0Y0Ckh5ZlBHTWFhQVYyU01oSTN1SW5w U3Z2NExodCs3ZGUrcDc4SitZZEs5WU5RRmpZCnVOMDkrbGR1WmhpSGY4MlpjYkNF
dkZZZ3JEMXRTMFZ4TEFBeXlLSXFyc3cKLS0tIEJkM2FMUW5RcnpmNjJCTFh0MDdW UGdZWnB6T2syQUtNMVRjcENRTks1SVUKLS0tIDMyYVVQcjRObnVocCtMeEpjcXlF
TmoxY21aNENmTWN1TkRrbDFvbTVTakEKCNxCeNpLIcS7aMpejljGfG38z+OCdwmf NVFreTVWMUxHTUlJMVhrcnR6QTMrc2MKcN9ZJQSH0n6EwyKZOtikybv6Xib1SHKK
GHcON7Rw6MDIndt6hT8B60V6aIIMx7Kk8Km36kSa1DKDturalmu7GQ== 295Qpuv92UNqw7f5DkvUuSuC3bJrDF7IbIFZEl0Zsw1kF4ABZcUbEg==
-----END AGE ENCRYPTED FILE-----
- recipient: age1zmp979z20mga9suh4fvhxcp5fa6a66jwxnx9fsd7lh3kj607hg7qz3jpew
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIWXdmRjZqK1FQWVp1eXdp
VDAzbSsyaTJZOEl4NDI0ZmtZZndHNGlZMGs4ClpwaWFPNzZWdENBMnhHZXU2R3VJ
T1JOTHIrQnJpaUJzSlE0TDk1VGhkMmsKLS0tIEI4eVBzQU5sMWExOU1Yam9ERmQx
b2xnZ0ZiL0YvdndrNldYeVpMUzdSUFUKj0HnkygZfhi3HLwfKA/gqUm9rYVAy7Hi
K1WmjMQVib7fvIAE3xyio1pI8GSow+EBOfXpfpIOlm5qX0t1B/DMZw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-05-02T21:41:15Z" lastmodified: "2026-05-02T21:41:15Z"
mac: ENC[AES256_GCM,data:7oygJgJNoEA47/dScV0ovAXPwarKbP6lN3DkxkG2psBzw0v1Ofi8STRzNPFxSd3zOXEe7IrgzKcEzdBg8RO7hnzFTScEl2KH1I5V4coGFkKEk2IHFk9SGPpbCA/6AjZbBmSJN79hs0DMzO2fNChdgQRVTGA1kgqRq49zeJ1uJbA=,iv:g+Ysjw5PCempy5zr971njH53I6Yby8yGfQR4Tarn7CM=,tag:EL+BVldVdB8L/NzBDvF6zA==,type:str] mac: ENC[AES256_GCM,data:7oygJgJNoEA47/dScV0ovAXPwarKbP6lN3DkxkG2psBzw0v1Ofi8STRzNPFxSd3zOXEe7IrgzKcEzdBg8RO7hnzFTScEl2KH1I5V4coGFkKEk2IHFk9SGPpbCA/6AjZbBmSJN79hs0DMzO2fNChdgQRVTGA1kgqRq49zeJ1uJbA=,iv:g+Ysjw5PCempy5zr971njH53I6Yby8yGfQR4Tarn7CM=,tag:EL+BVldVdB8L/NzBDvF6zA==,type:str]