add secrets and age pubkeys to sops

2026-06-29 17:22:43 +02:00
parent 4f9c6086bd
commit 70c2ada986
3 changed files with 83 additions and 4 deletions
@@ -10,12 +10,12 @@

 keys:
  # ---- developers (laptops, hardware keys) ----
-  - &dev_lars      age1TODO_lars_personal_age_pubkey_replace_me_before_first_real_secret
+  - &dev_lars      age1cx8ul285kjkzmnhw6skdstnzrxnnme4xkflknzn7yhv52fgxqevqkd66cn  

  # ---- hosts (derived from each host's ssh_host_ed25519_key.pub via ssh-to-age) ----
-  - &host_db       age1TODO_db_host_age_pubkey_replace_me
-  - &host_app      age1TODO_app_host_age_pubkey_replace_me
-  - &host_ingest   age1TODO_mqtt_ingest_host_age_pubkey_replace_me
+  - &host_db       age1wpl3vz60tlt880p5fmfedr8c59dm4kf0czsacv0w5my706twuf5q9p0x43 
+  - &host_app      age1g57pznep69nlyv3sltz6k0sml47v68m03gh68jkqwcq4jdx68vtsvnefq0 
+  - &host_ingest   age190gu75rf3ra89mhk27xe3tv87tad087altqhugjlhkerqwe2jfqsnu738d 

 creation_rules:
  # Supabase compose stack → app-host only.