feat: add ssh key derived age key

Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
2025-05-23 12:27:20 +02:00 · 2025-05-23 12:27:20 +02:00 · c91caf6b6d
commit c91caf6b6d
parent f69eec0a2a
11 changed files with 195 additions and 100 deletions
--- a/.secrets/hetzner/postgres.yaml
+++ b/.secrets/hetzner/postgres.yaml
@ -9,20 +9,29 @@ sops:
        - recipient: age1qur4kh3gay9ryk3jh2snvjp6x9eq94zdrmgkrfcv4fzsu7l6lumq4tr3uy
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBOUVxRXduVWhjNHdnZCtH
-            U0VLWE01VkJaWmNDUzE1bmorRDN5RWNwTnhJClRkcDNzb1U2MzZ3TDhXSnI4Z252
-            a1A0dzQ5eUlScDhhYjl6WEdnYnlxUm8KLS0tIDczaXlvcDVwUzdQY1h6a01QM2p6
-            T3FBVWJqaHQwVnIrNFVsWVBub2djMG8KsbZb43UkVe1Up0O15UTC/PdsEkwwOnVW
-            9P4AGO097HfTLkAjKJHx5QYF02dJ+4xb6rgzUYt9Nr8h8+GD0xRAfQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyQlk4cGtMeHh6dmFsb0xn
+            aElOWWlLdi9NU1FuUFJuS2c2bWRwTlJneTJRCnRhUWN5OHVJd3lDbGhUeU9SSExq
+            TG1RUCtoZmJ1eWdqRmhDOWZKRXBwencKLS0tIFA0NlVuSmhFNndlN2RTZG9iNnYy
+            L21KcjY3T1FlY2RVZ3B2WGxOYTdjcWMKWqUkrLNAhhKGXO9zm1CmEdK7hpJWMi3n
+            2OPPpK1kdrGg2ksZ6GDlEHslbNe9uc7ppKbJqiargdiVMdbNr6KWHw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdlhZbDhqamNGU2QrZDN5
-            MlY5RFgrV3NJUk1PYWJLSnpCZjhiTUF5b0RrCmRHV0JnYlBmL2p0WE9UTzJUcVhK
-            dkhiYlJtYWtDN0lseHRCNTUzb252TmsKLS0tIGZKbjA3dkVwcnZNK2djV1BvSkJo
-            a09FM1ZqSWdsdytjdVFCanVldHVoWUUKyy/LXNd/vZLdgXYXfloFkNviaddvrazw
-            4Z0bJ/fqGvRPlLkTUzZlhWKVXfZFGgo5nQSEvyphkIb6UCyd9VamnA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlSHFjdG80WWdpRjJybnVm
+            NGR1MXBvSUZ6eENheFR3dDNSUXFXa1NuaGdRCngvZHk4clpIa3ArUGl1TWU4RmtC
+            SERHNlVDTDIvV1UyUTkycFE3SE5WWGsKLS0tIHN2NkdZdFlsa0NkeXRvb2Z0aFF5
+            NTVDbVZFOXFKWUFDNEZ1YWtPeG1ZYTAKzQXiE4TtP4MwKe/Lc2Zz8CIbR5IihaQy
+            Tnm/r+wpgL8hiEVBNf1M2JZ2OWuRXbRU4iGg4tioCUQTj+c6Vl+gpw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNXRXMEw3NnMwQTA3aU9o
+            UkUvZWo2L00zeC9kWkpsaGhULzU4bG50aWtnCldrTXAvNC9DYWJZNHlHb1pIaXJM
+            alBzSU9jeDJTKzRvSzArQXZya2RGaVkKLS0tIGNodFg4ODZ1MCszRFJDVjJ1azls
+            KzVncWhwSlJEaWV5Vk5ST1c5WFBVdmMKobROw57uATH20rLzLrAEDXdOGXWZj7DK
+            Az8GC7h0IAtujZGni7DwNsW1JLwoWtvEk1mbaTjnxsCg9WzUJwoKKA==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2023-10-24T14:02:40Z"
    mac: ENC[AES256_GCM,data:7yikTQ7wsy13Hfwo5VKpUow8KW2/UYfzrWuA6Rp+21FglG3f7s6PLlrpMLooDPiaHxiPfc1fHg3u6UDcotyUljMZMQCCfvmLC1saALB6lFHEj3KoTa/NtgimYB2FeK92RcrU+EymmwZItmI/t1CuH8/qvXydWnO9zMWplMtW89Y=,iv:PEmElInahA5pPQvR9aatpKt+JhsKEtBPCPm926/59Uo=,tag:mflo6uSOh8SDKoC5JLHDIw==,type:str]