diff --git a/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml b/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml index b84463f9..56765f75 100644 --- a/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml +++ b/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml @@ -3,7 +3,7 @@ kind: Secret metadata: name: cert-manager-secret stringData: - api-token: ENC[AES256_GCM,data:NxNHiS0X1qQrgxI7Jp+nnMkpFzeydRDXflUEKHPZdLk8jSkDO67b6A==,iv:VHdpw/lw3Bz9mVqJ5blmb5g8XFzIiuFtovrMLDMBZGI=,tag:RygZK4bR8Er58Jrz9KfJpg==,type:str] + api-token: ENC[AES256_GCM,data:s7IQMl4CpIZJcnJ/vYSxyxh9HamjsoBuVAjAXxoSTRjY6yF4lNP0bQ==,iv:ipX7L1YQO6MSFncC7RzQPtilpB/puQqf3K8TT2M87yA=,tag:L1PWIRj6v/EwxSSkZdoXNQ==,type:str] sops: kms: [] gcp_kms: [] @@ -13,14 +13,14 @@ sops: - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUbzgrU0YrZStmelRUdzM1 - NW9zYkYzcUVneXk5VkpHczNUQUZGdTlndkJVCnlzbnNlOW9CdGRLZmJOcmM4aFd3 - WC9NQ3YyYlJ6RUFXMFFmb1l6YkJxNW8KLS0tIHBJSFJ5WSs2M3JFSFIvRFVzdEZZ - aWc4TG8zaHBSelZHSHBLeGZjeFFMTWsKKemrqJ6UIVvAxb6bkDCjRVxsITWTkkEj - OWwgIRWM87JJjDdod2ZWZ3p3Q+S9aSW1oLX8LJ6RMZmkQDbMZV5qDA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSMEJ2eUNBQlA4OE0vR0J0 + RjliL0JYd0FJdTR6OVFSd2RXMW50U3J4UkVNCm5kRWRlckxYSWFGUERCSkt5eDFX + RmQ4Ry9ybkdPME1vZ0xQa3BHc1ovWTQKLS0tIE5FWXU0MWp0dUpUMDRqY285Q21M + TGdRMlZrdnB2bVJBVnJONUZVbm5hemsKCCad7TGD7eDrHit+JFUyzzq7Vq7wlDoC + GzfdC0jK0fya6Sh/fvPvf+BuuAU6OEJUlIu7NlANN1g148wV5Ei19Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-02T22:51:49Z" - mac: ENC[AES256_GCM,data:nki0pm+kZW9rvDDdH4AM/oveYOdNydoHGOXOGBoc1jZwQxepsJrnmKWByQc7z7M+w5TNbCbVJP1D3Q8IMeq/xLjHkmFGW0CiVNH4UDByR1z3Bf5pJPJV4tT3MQGBE14Pq+L3JFM+CbLtI3lIBr75uqgsBHqT1vPqI1OYmxF/itU=,iv:8Iz8m17K7+HJf4rNIfZcsilGzS9o0cuWRsZLUqRhFJU=,tag:pRIkP2lhnPWmeSmipOtPOw==,type:str] + lastmodified: "2024-11-03T01:28:31Z" + mac: ENC[AES256_GCM,data:ny83LOu4+tSbFD1cbzntwc0hxR/jWe3GNdMox/X8HbVQ4zqx72Ff/bYSXzqitoae+Pvha2dtEA4FdF4PPnWAOoWeazjo0ihuyeBzQEor6ZAB0KbzeBVzjUPQhIA18axFvAKOGy/jrICKN15J/vEQ3Hb6mVM2XKdFZHGMCh//Ll8=,iv:p0F8n/DqUWmnGHZMlLZwsscQ3EPOfE/5rYdr9UGoxLo=,tag:N9D3r9yVpp3BzYUkTDlVlA==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ version: 3.9.1 diff --git a/kubernetes/apps/flux-system/webhooks/app/github/secret.sops.yaml b/kubernetes/apps/flux-system/webhooks/app/github/secret.sops.yaml index a6c143d0..20e22877 100644 --- a/kubernetes/apps/flux-system/webhooks/app/github/secret.sops.yaml +++ b/kubernetes/apps/flux-system/webhooks/app/github/secret.sops.yaml @@ -3,7 +3,7 @@ kind: Secret metadata: name: github-webhook-token-secret stringData: - token: ENC[AES256_GCM,data:lowAe1xkRPt4xKZXTwSVTWlTk2dFw5PiLiI2m+NZY8w=,iv:A2R4jBWBZh/k1T7Iq5LC1vOjrCEIBjq+l0I0gEyOeMU=,tag:h7JilfUjt5Rfo6dx4tVplQ==,type:str] + token: ENC[AES256_GCM,data:vmDVJPdPcSu9Z1z6iN3jlPzgfk/1pGlm++n8Xxo/jaQ=,iv:sE41K+XKWMQO8Sy2j2AqkAikUWn86owbDTCdhl3SmW8=,tag:iOK8L+vfRJ6SdVZ/16V9ew==,type:str] sops: kms: [] gcp_kms: [] @@ -13,14 +13,14 @@ sops: - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqV0tGYmk3dWJnNndMcTBt - MXlKNU80YnVLRWFpQ1o3TlQ0R3JRVHF2S21VClREMUpoSStQWW1pQjRQZGE2TXQz - N2oxRVErOENEOVdIb2prd3ZmaG02STQKLS0tIFlVODZwZGlha0dZS1A1YitnWEhQ - c210TnlXeXo4bURPRDdjd2NBTk16bU0Kt/fK+GACMnuyb/rKT28qUAP/Tjm6S1eb - 5KBRv+egnQHFmr/G6geq1YDRjFkl5v9cA3tgxGdMG+Qtupw0fgGvew== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwVTZucm9vd0R3em9ZWHpp + TEhCblphTDNOZWJNSmU1dFMzbDFQUnZiU0ZJCk4xSitqc01MdmhNQTYrNlV0L3E4 + REZMM0UrVXlKbTlyeWFDV2RsbkRSTmMKLS0tIEJhcWpjZndrNU5vbitCOUhZYzF6 + VEpScjMyeSsyRVNSWDlWUHlSd2U2U1UK+WN2iCtE3EQCOpoxBN+Q39ksoUfdBbOM + pXVBgjMgRRfTN6lTLvHLfFuifoMvjpezR19oxGc2NHZKesDYeE3uUg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-02T22:51:48Z" - mac: ENC[AES256_GCM,data:AaxZWdhW77f/pqZkxEbyxOu8rm3fF1EJSwMg0hmzNHuMw429Sw6Y9LPFLbXWKYCurRLwYBc0y/JKuDyUv+ODRhqEwqUY888v6FlcxBbfErIz3KLmJVvRbIrpq+sidgK52qjL18zxaTOXz4wWpgksBwsya2HjXbK1lGZAHVcXqFs=,iv:K1w+sEQUzlG0Cg2eI2dS8OUzvhYMhy4pkn2TnMNiW2E=,tag:V+oxo4TmPj/NQYrvh87G/w==,type:str] + lastmodified: "2024-11-03T01:28:31Z" + mac: ENC[AES256_GCM,data:twFiaMJgHzqNTHpmwx6u12/gsL87gnaSZ3KQf1PFCps7sqmJBYbjYdi/cGcF0H9RtNaN+Y9wnflFKcZoavnZwHRhh++yiFSbUAc3wIGP+/lUIP/uDlXBBxEBjremtFKU69JI6VM/HcbLvG430LVa+jbmPFm8jEoBGw/EhzSDumQ=,iv:ghFvZfA1WiLFmdtCvhGoAn0+/Bl61GfwWlJdOYRk18w=,tag:mmJ1kCJCIpNIVlXh0iGpJA==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ version: 3.9.1 diff --git a/kubernetes/apps/network/cloudflared/app/secret.sops.yaml b/kubernetes/apps/network/cloudflared/app/secret.sops.yaml index a0a0ed76..7ce9ea35 100644 --- a/kubernetes/apps/network/cloudflared/app/secret.sops.yaml +++ b/kubernetes/apps/network/cloudflared/app/secret.sops.yaml @@ -3,8 +3,8 @@ kind: Secret metadata: name: cloudflared-secret stringData: - TUNNEL_ID: ENC[AES256_GCM,data:b760NW/oZs1YCpxIkvrVtpuwHYcuPvH0m6WjiaYmW7ht2/CQ,iv:e4hD1dwvp+kfjlatk6yirkvpk5Vu8POc4MTMUz6iUXc=,tag:ISv+Y6K+CIL5Oszuwcmgxw==,type:str] - credentials.json: ENC[AES256_GCM,data:itYnFMRvxJZaB6fLSteD173ZiUKO5TCaFbdLHlOn0qsJhlTnIE73fg4azLu6CqpU1ggdU/ZFLHMnA4ZGRVWgdHCKp5g0mtL8bKkHRaPj38qnPp4EmF+0s2PKAptLLInenow+jvZmgNgT0xuLKbKWf5ag5qzSKQfLJHtUHUwHCSetSEqRTYnMUFKu7lV1J0PMrgeciqcGO7/pIb9tseBoLeL8w/f+JsYUqoDR3EEpRw==,iv:XDr58jd+jVGjU5QV98uRwxHAZaYONG8m2LxdENFEAqw=,tag:QQKao3hp8kePaNbUD4PbOA==,type:str] + TUNNEL_ID: ENC[AES256_GCM,data:NE19Bq7uCvUlUjaz8apia2A2hYPf7QdW5Ba5/oYVMAeArjwC,iv:IekKfPiSGfwpkkN0daLl2xcn4b4Nk4H+zWM36uXFCZM=,tag:Djp91HSAgufQ/0OVjkNqxg==,type:str] + credentials.json: ENC[AES256_GCM,data:6BQjYVyJS9M/DfnTDpxWjevJo6HbUmX+THnN7k9yARduyn9hHLYbq1WXCvSqvRY8kwYNhwr++n8o0vZpIaNzoTaIgxQISvy+2DPkFKe7wEFlfr0Dh9rQKKCuVD2WHmTafsQB0jgLgKP+WqWKfNoK7gFiqCfD9UxDH4atR3R17uHFvcFbEWtiqHvZjzGHlZG3d2hoMP6OwIQ4UAmQdM1xNFSx1odAKY491eUtwPMYLg==,iv:TGdze76JKFtJLralQnuLroCKUQkEXfcFxA1YadT7m6Q=,tag:sLVBXGaZszoSrhIyi453SQ==,type:str] sops: kms: [] gcp_kms: [] @@ -14,14 +14,14 @@ sops: - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEYWZiMnF2WGl2ZkkrU243 - ZWtXa0xaM1RRMmVRTDVXSC9KZHZTdm44K1hRCjZpQm1jaTJLVTI5bzhFQTh0SnpB - ZFZqVGx1WDdYdW1obExta2JDK3FDbVkKLS0tIE5pR3lRSmF2dUxMQ1h2ZVR1RFFJ - NURTSnZ5NGNYYXdiaDlNYWJXNDk5ZlkKpz185KxU8fNDSJ4DC4fNgw9RawKddLAC - gVvoJ2ptPyzVRyoakYsoJfT35eiVOH3PRjU1upQWeIqxiQ5pyeBHlg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvdHBIRUdZVEd4bzYvelAz + RDRudHlMYVFVUDhZdkNLclo4M3R5L2k3WHl3CkUyQkRXaC9TS2VKeEFIQzNuc0tv + alF5Rmhzbmc2NGhvWnJCa2FYbUpPcU0KLS0tIHFYcmdSVjlhaFVLSVhPS3dtaDJy + bmgrRDJhV01tdkxpUnVuenY5K0tuSXcKuDVajojVd12pQ5ZWiViSALLiphjV57aD + Isi9LybaeHURAhto66mwU3oTPq+Nmj71cHJHq2PIIDCJhC96sUjZIg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-02T22:51:48Z" - mac: ENC[AES256_GCM,data:A2L0pRn1CiQYSwYsb+iFV4YFzy6bzWySUJYui4VknsB2oKldu2YBGc/YvnT32wP6tjEUT6hAVia8pvmDNksgH736wPhLdTjOBI2SGWe5uyFcr+HrS51+Jeh3EfMN8g3JxSpnEXkxjOO1hANeohRk65+HgUASXcctYXls6QV23mk=,iv:pJ2M2l9bf9c37O9Kjkw8aJLida05Q2Y4E4eKX9xF94s=,tag:uAodvAzn+4pLMgfOgc9bzA==,type:str] + lastmodified: "2024-11-03T01:28:31Z" + mac: ENC[AES256_GCM,data:D4coWkO8BtkaswD99sUQ/T1i1lck5OX0aCuPyzkKkm0yXCCVjPnxGZEyjyJhPV1EhwNmV9Rh20cu+7hXKmkWlkLAEMZrx2J3pOt5IvO9i2rbWJavPOWj44zMAjXevQ7j6yjkrTjiI0+rrVsRg1YUmqszDBz2PWmnk+rVAWAnox4=,iv:97IOBdvQPh3cKRITE3e7Iu67gRu+Nq1yfEc9Os+DeDg=,tag:LgqeDFgseoRqdHzhxhyaBg==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ version: 3.9.1 diff --git a/kubernetes/apps/network/external-dns/app/secret.sops.yaml b/kubernetes/apps/network/external-dns/app/secret.sops.yaml index a8e8fce3..7081e4d7 100644 --- a/kubernetes/apps/network/external-dns/app/secret.sops.yaml +++ b/kubernetes/apps/network/external-dns/app/secret.sops.yaml @@ -3,7 +3,7 @@ kind: Secret metadata: name: external-dns-secret stringData: - api-token: ENC[AES256_GCM,data:mq9lRs57SkZIDHue3WDKwySWF1Y6F9ja6H3v4P98XamMAEAp+RwMwA==,iv:U1SeYr6N9p/hqGnbu1xeUFyOkC5MWCYDa+ahYid3ON4=,tag:v+P0b2+eWPBEty1mHftOzA==,type:str] + api-token: ENC[AES256_GCM,data:oWxWPqfUmBSdu0e0uR7LmWOmv1bOvjfkRytGHpiAtkojomTk0YJiHg==,iv:ALawl+17tR1w5drXCVbIHeBbg0VSw1xVUFSvOoWFX4c=,tag:bN38oypqrbSF1BK/O2hcOg==,type:str] sops: kms: [] gcp_kms: [] @@ -13,14 +13,14 @@ sops: - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQVJEMWh3d214bUZBRVBO - K01HSk5nVUFKSklJbzVIeFNTZUU5emZSZ1NFClM5Z3ZxMldzYStCZDZ6dUp4ZFVi - Y09XMHB0NUk3RVV5dEg0Ny9wMU93T3cKLS0tIHRBQW11Zmx4aUxhWUM1QkhLSi9r - VXdPd0UvbWo1citGWVBGOHdKRVJJK00KKy4uq8SeuibY2vrJSuJPqVyWp/8wRhtF - wxmPSjUpsFLytO439x2ukikj9f1WkjUL9svffktkoZrzZlGS84/QRQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTYnVWTXVVZHlLckpYdkQ1 + OFpFUjdiaUVKU0Vqc1h3WURNT2xUaFZOcWdZCnAycjI3OVRsNlBmUG5UT2t1TmFs + aW8zQlo3bHF0cG9BbmFKVEdUQmt1VXMKLS0tIGo3TTdMNG1HTlJPOURuQXo5YWIv + Q3dPSFBMdEJQM3JZYmZUYjNGK0swaWsKrj/Nf5n57C1BvRp7bFyW12xQMgj6x3W/ + Xk3UadiR+4zYGyzwXc3oe12UqhgbgICOs4jNSwuC9KuO38lLqi148A== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-02T22:51:48Z" - mac: ENC[AES256_GCM,data:6M9lj/KJEyziIp6AaBqcntzctg5QzJ0lg5r1C7oQRpFRqfek6rB21Ve/zuxjmhom9LZtVOI8YXySmuvHvjCtjG6simG5OgU2L/kdUX+arwCeSlKC+Ldk6ODK2HPy1bqqJZeYwnSGWRKkY9WYzWTNHakr9sWNZRVsmydF6MNGNnM=,iv:4vOWNIbdhjd3AC25re4Sc16Qvpqf8eYFI2wrwdjNyig=,tag:77HjhrJzpL6rTHa2ezJZhw==,type:str] + lastmodified: "2024-11-03T01:28:31Z" + mac: ENC[AES256_GCM,data:WgcB3mSegh0iXLvVm5cv3B/FXa3Il+zU0lf5Ah+nQ4UrvFuII5LqbVvlPqoPzILaphnicnaFHPC3JWch7CcxmPoAd42zVyAzH7VbAJA80Wa27NZVfEx99ggaC+9w7L7zcEFr9DFufKwY6wJBSZSmiqgp/zQ5pPj5VA97HMrL0eQ=,iv:b5v+ThnrmHYjfWSm8mAjBqbTm3kV4/jaPwttRNgN9gI=,tag:q2w54tg+Lrbn+Z/7mNjW5g==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ version: 3.9.1 diff --git a/kubernetes/bootstrap/flux/github-deploy-key.sops.yaml b/kubernetes/bootstrap/flux/github-deploy-key.sops.yaml index cfa2a1b6..c7975d00 100644 --- a/kubernetes/bootstrap/flux/github-deploy-key.sops.yaml +++ b/kubernetes/bootstrap/flux/github-deploy-key.sops.yaml @@ -4,8 +4,8 @@ metadata: name: github-deploy-key namespace: flux-system stringData: - identity: ENC[AES256_GCM,data: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,iv:UsVxGor99adkoDIrUugaVzS0vBfVi3EjW/nM5BxA1Z8=,tag:sO/yjKGgCOxI47O3vVi3dg==,type:str] - known_hosts: ENC[AES256_GCM,data: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,iv:PpnvGDJt7lq1Z5nAndsXXzlZEEQfaY/49lkXqN0gIh0=,tag:O+27CrqYyyHAF7OLs4DuZA==,type:str] + identity: ENC[AES256_GCM,data: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,iv:T/jaEsG03VTNytfIgmq1sQQ0OWuTmx4BoWUJnU/X974=,tag:b4r1N5spzB+fCpqly908vQ==,type:str] + known_hosts: ENC[AES256_GCM,data:dRqdcyjYqEw53iC6Z2O/1Fz57/GyPK2P/BTVaKB6q09AOAVorwd1Psov1nXIt/9o/pLZtfwE4WAF2eUsSuLDaRyOX41f1h9TUAYAQaL2bGbitW4oFBFSsotX6qUwcbInbgWmqpzCzoXWzBnd3y4aSZoS68/+eBbIzUSNR6MeuYT3YAFQJw65XTTfhx8reGUOV4hmcHboVLRmaPuGW7DxBjrA9yocKJupv82ujelfBDS1hXI1X4P9o61Wm2tn9k+N7A3DtSUutfWubBR4KjHZ7kuOADklsjTqbLnBHRBMkb2DUeIxI5dXuE52yG3lGTzCE3ZdS0REWKOBGCPhBVSf+FMgSscZhoU+3fr3Ao4CWY9LxM868qhShSO69qsk/KdXVPXnn5//Wb7gOXVJJzu+GGuxkgV8xxV3UO+XYDiFr+x7c82a4TzSGuzfpFwV7rxcjgGHZZH33zRloObEdDc1dCqZAEXqiKhG2f37TUmsabY3rsYhpvb9EA5rWlK1OkZeuxSeJ8iP7IP+Bcq/wU4kfgquftXbqeQi5uqOQy1vIcJnWJGax7/wx4j3QGo6H+W6S6Da649RueFf0Z5tZSFiDUkMp1rl47IB1xz18jPraA2WaMh/WVN6lNFxmf53Tf4r/RLkWUbnnhGGaQqBpOfZ2M8tOtrmRYLv/JNalQ7KtMsi25wNxFe9gR2omyl9GUV5QEdarPAfyNO1M9YXyCsubU7BEIPjcM5nN12RkpElcdqhMd+8648c8O9eLhe07QUdIWyC7ap75rQOWZY8eJIPXAo+0QnzASzqbUGAoRBTgc7SJ4HHnEMu3JNaAVbkt8pNSNfRyVdtEsr6WPG4QsLGILs3/shWpQKMNmuiv5rkZXT5EMMGKOInmFr9/CPrzwZnA/uAbbw7cYi9Z4EepL3Kjo8F+daGArUr+RBnkg6q52YVKu6C/8aKoI1GRlBKAQqy6BDG2JbnrMdApy8fH6qMtL1P1jnFSusj0UHuVhnnRnAJeb7XbDWAhI9jT4kiCJg9VdMSZNOQjyYCphuh27r0LE9eSgfDi8kXc5l0uehmV0aGyY1JrMiiQ3lB+2IGZ2Caaaw7hW0ToJI9dzfEtJKvLgN/iTqOwKUga9BhmgQJCkK5oemDQjhLQqhqFiYmX5kKBgWsP2W8jQ6nClDNclegZtUVBfQ8LDQJN8kERmAB1o/YUHiaBwD3J+T/dvqEvn6LmqrBqwWD01Yv/puASTaB+l39,iv:AZV7NKgdUypyY976yfP+jXJv8shE3ef0FMYhRh7yOiY=,tag:2jY95kBSTrVFqa+czEEYEQ==,type:str] sops: kms: [] gcp_kms: [] @@ -15,14 +15,14 @@ sops: - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzNXBValA1MkFXa0lNRUJ0 - STh2VWUvaEkyQ0pvMnRoUlRIZ2o5NS9PMjBvCmpnb0taZXA4QkVaTXp4ZXF0d2RT - dW1keERwZVpnTDdjUEhpaXRId3ZWY0UKLS0tIEFlT1pYS25YVVAwOHJ3WFh1c2Ur - SDVnSHpsTythNWxSVlRMVDlHUW96M1EK34yYrAnnLYpOgXCk4Gwd2FUZDvuCJxRU - I4h+6cM5i5xzYn6R0azQgcLw0U6kqUK8git6rxbhgwCTnTXs5en8QA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3RjJycC9pK0VKakNobTVJ + MHdnZlcyVnROSWY2eTI5UVI1MnlYeHoyMVNFClpiS2JiZ1g0b1ZoN3VTYlBDd1p6 + Q0xPdVJ4WllWYzNFOUJmYWZEWU5qRkEKLS0tIDZUV1ArV2FSaXZVdXI1Q0xPRnRO + NEZCUzRLQWFZUHdnRU5uaDZZNkJwa0EKB+f2yr9J2xrYLzFmPBjNMqQFxEfH3ehi + udzqSXMlMyCC/9hygqvtrSRkN9ucEBnIlGSjcCnT46Q9uw6cgESKKA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-02T22:51:48Z" - mac: ENC[AES256_GCM,data:52aniONxDtVmUUbmQO0Of2IkgicIfZDlgCfjpt6U4M3GdzSGmS4Sv5+2o6bZli5jQCfpH52KEkrg/4FazEcSeGOs3yauH/LVGcunxUZkTkuYTNjJU9sRat1ZPPMF7dW6i5pu34q+rJEEWwROCPePPVm+qLCRgwntvkcCO0ebZiE=,iv:8ph9ExhIaNHCLTMAH1+dzKciuHpub3wtyY4RKIfkR8w=,tag:2PClGojbpV+P0XIhT7/8sw==,type:str] + lastmodified: "2024-11-03T01:28:31Z" + mac: ENC[AES256_GCM,data:yRo5qmDZElQCudDkf0idGepctQOA/NmcSEEy06kuiCoPLIdK8RHOrSwhlan1rGUiLI77HwAk8nLfqo04Bh78vdAwC8XrCLIP2kUjTsN1eT9l362zMEGDAWwh/ErnL1psOG2ExdFOImaDjABYANIt+RZP/XddXbCC5PdkCd81QIg=,iv:tk+kxtS4zzYuSg5UY+pPxSmbZ0YOxC//CWM6LUvtsbY=,tag:q4/Is2iPBEWVY2DKShqMOw==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ version: 3.9.1 diff --git a/kubernetes/bootstrap/talos/patches/global/dns.yaml b/kubernetes/bootstrap/talos/patches/global/dns.yaml index 7f801083..90a0492c 100644 --- a/kubernetes/bootstrap/talos/patches/global/dns.yaml +++ b/kubernetes/bootstrap/talos/patches/global/dns.yaml @@ -1,5 +1,6 @@ machine: network: nameservers: + - 192.168.1.1 - 1.1.1.1 - 1.0.0.1 diff --git a/kubernetes/flux/config/cluster.yaml b/kubernetes/flux/config/cluster.yaml index 7bfaeeb3..9f7891b7 100644 --- a/kubernetes/flux/config/cluster.yaml +++ b/kubernetes/flux/config/cluster.yaml @@ -6,7 +6,7 @@ metadata: namespace: flux-system spec: interval: 30m - url: "ssh://git@repo.home.arpa:222/infra/home-cluster.git" + url: "ssh://git@192.168.1.68:222/infra/home-cluster.git" secretRef: name: github-deploy-key ref: diff --git a/kubernetes/flux/vars/cluster-secrets.sops.yaml b/kubernetes/flux/vars/cluster-secrets.sops.yaml index 7efec102..65648c7f 100644 --- a/kubernetes/flux/vars/cluster-secrets.sops.yaml +++ b/kubernetes/flux/vars/cluster-secrets.sops.yaml @@ -4,9 +4,9 @@ metadata: name: cluster-secrets namespace: flux-system stringData: - SECRET_DOMAIN: ENC[AES256_GCM,data:pjOnLwALngb2TYhn,iv:cabBq7HbfR2MI8olJYJoKX7fhbIVDWnXJdZBPhMSdqA=,tag:Rrf70nkJNApOsSa+4/kvqQ==,type:str] - SECRET_ACME_EMAIL: ENC[AES256_GCM,data:W6UDzcMB3USSZXkVfb68X5UVmMs=,iv:PkS6hGjKO80MjkUV6EsOpm6PG3Qpbo4BlBvVM1s2LGs=,tag:ECzwK3HkjQCMOS1O/zTTPA==,type:str] - SECRET_CLOUDFLARE_TUNNEL_ID: ENC[AES256_GCM,data:BjECCs6SSL3/I/kIbBl3yXFMZs0o/+MjXJRDDFwapeg2PVTb,iv:CjfQe6CYXSMOZJE90zlqRRl+ug3Lj2e87XQw+8pp72E=,tag:pO0w6b0YM6fkt9oyB9C7aQ==,type:str] + SECRET_DOMAIN: ENC[AES256_GCM,data:08YRXQxYZH+CEsm6,iv:skoq1HI+V0rGfEZIpIYaFuzbK3xh4piBniI+Zho3I1A=,tag:BXll+zc4Lgf1Vd4MQF63MQ==,type:str] + SECRET_ACME_EMAIL: ENC[AES256_GCM,data:P0MfgvVWg7GGnDqAFvXkq1JFX50=,iv:qqCsF/Na7Fjlisoie9SEadyDwSHJYhd6J6KdW7ZNiqE=,tag:dSyt9+xb2JryrKiJXywIWQ==,type:str] + SECRET_CLOUDFLARE_TUNNEL_ID: ENC[AES256_GCM,data:lfZjGAB4uyb22s3HHVE9QH2n7qUQx1TrJtN8ecRz9mD/R/jY,iv:MTmST9Oy6MrnGd542cUjmSB7ogdQkLJYFl+hUasDtco=,tag:hY7UJDKAIAuMm2oqpU7Mtg==,type:str] sops: kms: [] gcp_kms: [] @@ -16,14 +16,14 @@ sops: - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQZDdtSjFSb2R5VlZXdGUr - aUltM2Y3UVBWSmw3OWpBVmFJWE1NUU9zL0RNCkxXSWdGVytNSzdUZTh0S2FTdFQx - MFltaUU2bFlhbE9ZcHJWaTdQTlRkSTAKLS0tIGtEdzlkTGcrY3F0TS9BdTRqYnd5 - MnQxblRVaW1ZSXpnY2N1SFl0YmNjR0EKfg8sG/xiLtqAAEYpkR7/wF4lA6/8ZXqB - hIo/TYVNysNPMV0scDB+BCgVs2pQYeuvZo4IIyeY2vCZ1nGB+f2rvA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSemVka0o5RVZJVjhtamd1 + TzVoZk5HTTJta2dZV0NvK2Y2Z2lwMG9nS2tRCktOREtPdEllakRIVk1oMExxMFAy + NENncmx3S2VmeUdDUTVWVWRZZHRmVTgKLS0tIHhwK3VTRWh4bDYzcFBXR1Jub0U1 + cHpUMW1GVE9lTFlXbjdlYXpFN3JZNXcK8R/HmRuk5xN5PhxIABY2cT3ZXiFlhrii + 1Q0Lnfb1TzzET3aHZBwOUxxU4sg0aoFv3GLuuMczB2dDpHjvxsfs8Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-02T22:51:48Z" - mac: ENC[AES256_GCM,data:C2vklWjiy6DQKdGU7yT7F+fok5BB5/R9l9kVu6DWPIZJnEBjtsA6W3weV3fgHYghKy7etRRzQ+x9BSWgBE3xB2njYAIyKeN3l5dIJPoB+2rEaSPqihgGmLpVOCU/UymGmn12agfO85RTxqDtQUQCh41reQmuZs9muWUuf/6/vik=,iv:RcxeuQ+34rXLVQ0anLXGGifx1pEVdYhbDLObtXmBa94=,tag:KA06FRltzyUvz7vTfev3zA==,type:str] + lastmodified: "2024-11-03T01:28:31Z" + mac: ENC[AES256_GCM,data:ZQM5ltr8fn4umo47gp6GndtCjCmIwM5U6jOufbWFalbqI0JSQ34o590jtMzoa2yVhLvsCTrLx4TC0ZQ0/Um0p72Ju11vU3S+HF/YHO0eWSF4qybb415wiFgowxMMNNe4JJusAgMNlN/ODwqoJ4mFanIkSuCekm2D57WntCPCdgQ=,iv:oN9m+iiAhtffRdLQb/AmTSr7i+JKlL+DGdF1B0B0S7I=,tag:GtGhZkdD1lMx+rlGJoND1A==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ version: 3.9.1