Add SOPs

.flux.pub.asc

@@ -0,0 +1,13 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=JL94
+-----END PGP PUBLIC KEY BLOCK-----

.sops.yaml

@@ -0,0 +1,7 @@
+# .sops.yaml
+---
+creation_rules:
+  - path_regex: manifests/*.yaml
+    encrypted_regex: ^(data|stringData)$
+    pgp: >-
+      E7E621B77BB5F0C49062580B8C428CC41BFBD206

flux-system/gotk-sync.yaml

@@ -1,27 +0,0 @@
-# This manifest was generated by flux. DO NOT EDIT.
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: GitRepository
-metadata:
-  name: flux-system
-  namespace: flux-system
-spec:
-  interval: 1m0s
-  ref:
-    branch: main
-  secretRef:
-    name: flux-system
-  url: ssh://git@repo.home.arpa:222/infra/home-ops
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: flux-system
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system

flux-system/kustomization.yaml

@@ -1,5 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-- gotk-components.yaml
-- gotk-sync.yaml