fix(users): encrypt user password with root key

2026-05-03 12:51:48 +03:00 · 2026-05-03 12:51:48 +03:00 · e0f2ba3fd4
commit e0f2ba3fd4
parent 4fbff60171
2 changed files with 17 additions and 6 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -2,6 +2,7 @@ keys:
  - &eval age180qx2rwyelak4wtdljcy9eqxkskfcfk4fvq26nuqqz8rtjdyyyzqlr8dt8

  - &Sk7Str1p3 age17669qkln533e3plts9f3sfs3u4ra8c92ddcx2yk5fngzm4u0u5ls530vnl
+  - &root age1zmp979z20mga9suh4fvhxcp5fa6a66jwxnx9fsd7lh3kj607hg7qz3jpew

 creation_rules:
  - path_regex: 'users/[^/]+/about\.json$'
@ -14,3 +15,4 @@ creation_rules:
  - path_regex: '^users/Sk7Str1p3/.*\.(enc|yaml)$'
    age:
      - *Sk7Str1p3
+      - *root
--- a/users/Sk7Str1p3/password.yaml
+++ b/users/Sk7Str1p3/password.yaml
@ -6,11 +6,20 @@ sops:
        - recipient: age17669qkln533e3plts9f3sfs3u4ra8c92ddcx2yk5fngzm4u0u5ls530vnl
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzMml5VldXSVoxVjFoZVVP
-            cjVFM3RORmtzT0IzZDRiY3I2MFFrOXA4R0Y0Ckh5ZlBHTWFhQVYyU01oSTN1SW5w
-            dkZZZ3JEMXRTMFZ4TEFBeXlLSXFyc3cKLS0tIEJkM2FMUW5RcnpmNjJCTFh0MDdW
-            TmoxY21aNENmTWN1TkRrbDFvbTVTakEKCNxCeNpLIcS7aMpejljGfG38z+OCdwmf
-            GHcON7Rw6MDIndt6hT8B60V6aIIMx7Kk8Km36kSa1DKDturalmu7GQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjckZBU2lCeHY4d1k0RU9P
+            U3Z2NExodCs3ZGUrcDc4SitZZEs5WU5RRmpZCnVOMDkrbGR1WmhpSGY4MlpjYkNF
+            UGdZWnB6T2syQUtNMVRjcENRTks1SVUKLS0tIDMyYVVQcjRObnVocCtMeEpjcXlF
+            NVFreTVWMUxHTUlJMVhrcnR6QTMrc2MKcN9ZJQSH0n6EwyKZOtikybv6Xib1SHKK
+            295Qpuv92UNqw7f5DkvUuSuC3bJrDF7IbIFZEl0Zsw1kF4ABZcUbEg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1zmp979z20mga9suh4fvhxcp5fa6a66jwxnx9fsd7lh3kj607hg7qz3jpew
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIWXdmRjZqK1FQWVp1eXdp
+            VDAzbSsyaTJZOEl4NDI0ZmtZZndHNGlZMGs4ClpwaWFPNzZWdENBMnhHZXU2R3VJ
+            T1JOTHIrQnJpaUJzSlE0TDk1VGhkMmsKLS0tIEI4eVBzQU5sMWExOU1Yam9ERmQx
+            b2xnZ0ZiL0YvdndrNldYeVpMUzdSUFUKj0HnkygZfhi3HLwfKA/gqUm9rYVAy7Hi
+            K1WmjMQVib7fvIAE3xyio1pI8GSow+EBOfXpfpIOlm5qX0t1B/DMZw==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2026-05-02T21:41:15Z"
    mac: ENC[AES256_GCM,data:7oygJgJNoEA47/dScV0ovAXPwarKbP6lN3DkxkG2psBzw0v1Ofi8STRzNPFxSd3zOXEe7IrgzKcEzdBg8RO7hnzFTScEl2KH1I5V4coGFkKEk2IHFk9SGPpbCA/6AjZbBmSJN79hs0DMzO2fNChdgQRVTGA1kgqRq49zeJ1uJbA=,iv:g+Ysjw5PCempy5zr971njH53I6Yby8yGfQR4Tarn7CM=,tag:EL+BVldVdB8L/NzBDvF6zA==,type:str]