feat: add ssh key derived age key

Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-05-23 12:27:20 +02:00 · 2025-05-23 12:27:20 +02:00 · c91caf6b6d
commit c91caf6b6d
parent f69eec0a2a
11 changed files with 195 additions and 100 deletions
--- a/.secrets/hetzner/forgejo-runner-token.yaml
+++ b/.secrets/hetzner/forgejo-runner-token.yaml
@ -8,20 +8,29 @@ sops:
        - recipient: age1qur4kh3gay9ryk3jh2snvjp6x9eq94zdrmgkrfcv4fzsu7l6lumq4tr3uy
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBOUVxRXduVWhjNHdnZCtH
-            U0VLWE01VkJaWmNDUzE1bmorRDN5RWNwTnhJClRkcDNzb1U2MzZ3TDhXSnI4Z252
-            a1A0dzQ5eUlScDhhYjl6WEdnYnlxUm8KLS0tIDczaXlvcDVwUzdQY1h6a01QM2p6
-            T3FBVWJqaHQwVnIrNFVsWVBub2djMG8KsbZb43UkVe1Up0O15UTC/PdsEkwwOnVW
-            9P4AGO097HfTLkAjKJHx5QYF02dJ+4xb6rgzUYt9Nr8h8+GD0xRAfQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0MG5wbzdndHRCdjJTbFNK
+            WUYyeDYxLzVrSUd4R2F4NVpGTStEUGx0VkNjCllEOENwa0p3N0NnMjZtcStCU1lk
+            bTVWdi9rc3Q3Z3UyWjFPaUtoQ2hBRE0KLS0tIGlEM0VJUXp3MzN6WmdJekE1WlY1
+            a2JOeWZzdW5Od2ZJcjdrM0ZiQzFwb1EKLsCXd512uFw7FmiPTOLcBMIg8y/xZmtw
+            uZRuHua2jDegV6bWUkAg16f1Q4DguEL5JZFqCjmveJclZDUepWgKXw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdlhZbDhqamNGU2QrZDN5
-            MlY5RFgrV3NJUk1PYWJLSnpCZjhiTUF5b0RrCmRHV0JnYlBmL2p0WE9UTzJUcVhK
-            dkhiYlJtYWtDN0lseHRCNTUzb252TmsKLS0tIGZKbjA3dkVwcnZNK2djV1BvSkJo
-            a09FM1ZqSWdsdytjdVFCanVldHVoWUUKyy/LXNd/vZLdgXYXfloFkNviaddvrazw
-            4Z0bJ/fqGvRPlLkTUzZlhWKVXfZFGgo5nQSEvyphkIb6UCyd9VamnA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJOUNwUW5GNEpqVUc0OENJ
+            alEwcVNCZlBpYVV1VE05Yk1kcGx4akVOTmxjCjd0enpYQnp3aFFwQ1kxbnlDQ1ZY
+            T2RGOGsrMEc1eUxUbkpOYWt5N1RIcUEKLS0tIFVUamVUVisvcDZyV2N5bnBLV3JJ
+            SHp4RFpaOVRWeU9pK29PSTZzSUFuV1kKsrxzf7uGudHrIR91Uz7ne/GSN6KtF5PG
+            Ib3HDxZsfyutRAPhz1N0GfoDuZZl7h2VjXkuDxi3ENMbH/5GdvwPFg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGblRFVFFhbTNrcS9ScW83
+            a3FteDlrb3pDNXFma3J5NFAvemQzQTV6RkFnCmgrNXU1M0VMeFVvblErblBIRmIz
+            WjkzaWNIMUd2dTlaQW4yemR0cCs1UzgKLS0tIFdHTzlscnNJNEZVT1NROVdxYWVo
+            V2NRRWk4QVdNRW54KzgxZnQ3YjV5aFEKy1CG2ZBq8ZcuCKgarCSddiScN09ul1hz
+            +rK4tg44k1sPsrmK1OIY5GLNVg1oKL6huxS+/JOe6FWB47CqRDyW5g==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2024-06-27T11:07:00Z"
    mac: ENC[AES256_GCM,data:A73eobLa3aPeHkW1scY/xWWejVnCcEPJW9Vnx03HzEhk8Gv2dYAA6Xvt7hXMTuYow4A2ixmAFjn5GltvvOo3dUgumvHBlf6Kt39bwumiNmLD4mcLAKGnL55hSFn0gInEL5xjiqvlIokbPZFJec7CsS2f8PsL52/cYe5u3aSsqmo=,iv:ch2quofqaCUT1EjsIoWAlQzswfxxAk/eTfjB2tWsAzg=,tag:BlNpCt9r6iZdzJASCWHThQ==,type:str]