add secrets and age pubkeys to sops

2026-06-29 17:22:43 +02:00
parent 4f9c6086bd
commit 70c2ada986
3 changed files with 83 additions and 4 deletions
@@ -33,3 +33,6 @@ postgres_admin_password: "replace-me-openssl-rand-hex-32"
 # encrypted). The ingester will authenticate as `ingester`; `admin` is for ops.
 hivemq_ingester_password: "replace-me-openssl-rand-hex-32"
 hivemq_admin_password: "replace-me-openssl-rand-hex-32"
+# Shared device login (Option A) — must match mqtt_user/mqtt_password on the
+# senders. Per-device users (Option B) are a TODO in gebos-secrets.nix.
+hivemq_device_password: "replace-me-to-match-the-sender-mqtt_password"