Preliminary fortress stuff

2025-07-30 23:09:24 -05:00 · 2025-07-30 23:09:24 -05:00 · 558d654b6c
commit 558d654b6c
parent e344c1c27d
7 changed files with 155 additions and 38 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -6,6 +6,7 @@
 #   nix-shell -p ssh-to-age --run 'ssh-to-age -i ~/.ssh/id_ed25519.pub'
 keys:
  - &system_bastion age1up8uth9hwtd9gup3v32l8dypdarj77s2lysm8js8w8mwa80rk4ds76ke6d
+  - &system_fortress age1v3nya8n8fys8une6cp0t4agrqh4zjk7dk3lel5403xjkf6k87qdqhgjrk8
  - &system_blockhouse age14j6ns297c49wx5d8jddctfmek0kvn8rvw3y03nw3pankc03dlpuqhvvy7c
  - &system_living_room age1kmt2khucyvscmwvrjnt0v90zggttuap9utx7rw54g9amhtrkzdlq94fe4j
  - &system_ll_latitude age19v2gpucsykaqu3hsvskl67ss8mpqstp59vn687am6px9nmg585ksvlhctz
@ -17,6 +18,7 @@ creation_rules:
          - *yubikey_lauren_primary
        age:
          - *system_bastion
+          - *system_fortress
          - *system_blockhouse
          - *system_living_room
          - *system_ll_latitude
--- a/home.sh
+++ b/home.sh
@ -1,2 +1,2 @@
 rm -rf /home/lauren_lagarde/.mozilla/firefox/lauren/browser-extension-data/7esoorv3@alefvanoon.anonaddy.me/
-home-manager switch -b backup --flake .?submodules=1
+nix run nixpkgs#home-manager -- switch --flake .?submodules=1
--- a/secrets.tar.zst.gpg
+++ b/secrets.tar.zst.gpg
--- a/secrets.yaml
+++ b/secrets.yaml
@ -4,65 +4,79 @@ dotspace:
        MyBook: ENC[AES256_GCM,data:6aESJ331WjclGzzDYjqIReEhZmOYcEVdm0pK5DROm0aOycdd5N/my3FNmnw85T/3SeLneOsfXxM=,iv:PX0zuGXq3Atmuk4+78iJkiifnKYOW5dYUmsHjhlD/mw=,tag:lzEz7DaxGzsFD2gtoM3vOw==,type:str]
        Archive: ENC[AES256_GCM,data:vz7o/qRVbIW97FJG0MeljUf3Wc8zhdl6ijgghOfyIikRCKzfuHBAmKhMBKtuIt0uliCJhcCJwbw=,iv:5nZ9R6Mx890n95uMCbiX5mwoJPJOZ/dm/MpsFDrHcQI=,tag:Bk56jnyJJDpz6fm3EfXWGg==,type:str]
        Frigate: ENC[AES256_GCM,data:rzcjpec10FgCx0IoURkDEPPd4l00SP75kn4X6VEFAv0w1VQ10h6Ww7msyhgttPe1+P5cYJyuzCw=,iv:WSvIezNccUoSc2z3wyCAGrK/u7iwJl4PBg9xM5RjpyE=,tag:u0sSKnQ3fGnudo1KRobOPQ==,type:str]
+    pki:
+        public:
+            lagarde.dev.pem: ENC[AES256_GCM,data:lAlBMu65TyZy5ixTy72vxHG1TwtGxZ3IG7Wqjasba94+yokEjrDP11GR9BP8aVm6Sr2p+HWF9KwW9x90pjCW8QGLgV1DDvs9QeSRm1WVWYFJcchmMgX2rzbkoMITR8ZYlAjlhClv7d2bcmmVw1ZNh882qLe8TCjUAdMZ5QkKZQXU8t0YfyL9HxZrQ9x1QVCJst6eEUQkaKN6+crSnjNiwJEZfwmh+yPm87BUfgyjQAAE1KCxA7xi2ddqDXYWMMzt5TF9KhnOwwrcM31WLhI4eb6em1dwZaglIH9ydQRDzTNBioTsayczxKczt/KVkh18,iv:NGM6E20pVHCKxAIWwJkVvGqv1nX+vhbi5vTybcrRuDw=,tag:fh5zcAbWgfL/h9OZGvN2QA==,type:str]
+            mlaga97.space.pem: ENC[AES256_GCM,data:Ki21r053cQki2vI7fEb5BOWztq4CAvOe6u9nz/ZyxJ17fKaz3T1gRjBXlyu0DERdk+SnCqcHuuscQ2Wl/YJ8eGS0WB0+U4lkEdZPI2qps2dgOh5rsLNmAllfTgvZ+lLnoFnHBYwYKStMQT819+Z+xHuOhBUBC6tFPwFHS2ICnQEZtdSTqno8hWlHyLlO8jCCzQcUWgfk2yUqm2Lfwq9CgCRMEy29Wh2HbUTIyOcfnE6k7pkG/aqPEeK5gQVNF3LzKimHgxIl5l9cPWb4bbwqRV/JGd01S6Wq62Lr4i8ElyphECTj2p8SWdvUNb2ITLWx,iv:CMJjeEMr/fFUe+ampiJ81t8vcWPcmSJHX3OW7Y4+YPc=,tag:Xs0GXXdt21aakxZpnJj3Zg==,type:str]
+            bauble.boutique.pem: ENC[AES256_GCM,data:8fhTINT9gnLzX8owH4o020i/wOcTNJbuLCOnf72ociwAesnwzHyQm8WULjhx36BSC+tRNsBWFAQf6p9/Es1ip3H685yj8KApwWWWT3Px/chOrxisc4ctVQZRaiLRmJ2RIdaupQKXm6/uUGRqNZxUI/uGh6g26M1ObDf8OiIXNVLGTGtoAXUrJXVg7rzrFgDgTXsZsaqIRglQfUOJJjsa/v2p6JufxO5x/jmRIfVLD37vMXPXAgxjUau3+ZKQNymfh1I25dRSkrfInuj4P2ECENIu+wITp3po/Of69PvfZIuK8s7eXQu3GRC7nYOtoR5l,iv:DRN9lLhvhWuWizNbGDN8SWT7UKk0iVzuZ1oJoDVZeu4=,tag:luqcf5lKGU6UanXf9vN6Cw==,type:str]
 sops:
    age:
        - recipient: age1up8uth9hwtd9gup3v32l8dypdarj77s2lysm8js8w8mwa80rk4ds76ke6d
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6WHBIaGM3M2xLRmw2Zzlt
-            VDJvbTE3U3hQNEZLcy9XOFFDOFBDemNlaHhVCkQrckpWQTlUUGRvQmViTXk0R2Vk
-            clp1YTdYdHhnSlRRT2xaZ0FGeCtxRGsKLS0tIEtiR1BZSjdiOFpYYzc4ZmhoRzIr
-            TmdOVXBIWS8zeHR1SC9UOWc3elVINVUKvCXooydvkNeZNFhYinrDZ6vh9ufskNU2
-            bLkUkFXnPN42XEJMgeZ0cOmxturDPjEcEW5iPIK6ZyISzbIQoa/Amw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUUWZEWGNhSlFoZ3lyTDFB
+            UFRoMzJUVllDaTJoUWk4ZDRmRkszRGZlMjNjCkFjMVJFeThWcDJWbEtQcGgyUGd3
+            Q0xDMjU1WVhPL2Z5Smg4bnFtM09uREEKLS0tIEVtcnlITDhSSmRnNmJScHQ4ZGRU
+            MlJ0SHRDZEI0S1BIL3A1ZGp1Ym5VUDgKXStZQ9SkULr9Lix0uhCJ5enszs3sDpMR
+            PLoNroOYYfUPnzxNyIlTqpdvR+KeRQLLe0rQhX8ddbVf6CXKP3dUXg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1v3nya8n8fys8une6cp0t4agrqh4zjk7dk3lel5403xjkf6k87qdqhgjrk8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvWmxXSFk1ZkpzUUlIcDNx
+            YUdLQmpxSnNBVkY5MC9RNTNQcHd6ZDl4VkQ4CmF4UG8vNS9FYjJCeU5YN1lCY2xG
+            ajZVdHJoWHFjSlU3dGtSaGdFSG13NWMKLS0tIHNtUTlVVTY3U0dIOWJjcGxVZlJE
+            a1ZFSUpkQXlYNjh2RlZuL09jdmVraE0K0YOa5s4Z81fQXnL2KSEPO8t6riiXFwVw
+            YSybBxht1U4l45dGuhRH3+o8YA+aWrk5GaKU+qc6SXhfjd0wsl0J+w==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age14j6ns297c49wx5d8jddctfmek0kvn8rvw3y03nw3pankc03dlpuqhvvy7c
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWeXEvM1JkNlh6TEFhZlZj
-            bkw1UGRVNEV5S2VJeWVJOWFqb094cmtlVVhzCmhMbnBxaXBhL2dtUitrVFVqMXgz
-            TjRZUWNWYWM4NlhJVytDNHp2RGJuVGMKLS0tIHJrNyt3K0VkdVRGV2RvMXBIa1BN
-            UGhndURxMmdJeU5VUDdhTTdUai9HOHcKwVxV6z/2jJ5KMElyAWnKQ9PM5LD5Y4Mf
-            6Dvf0SxCkBUbFspTiHIr0J0Qy8ja57KHXFlqPEVVUvy7B+XgDhnRHg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0WGtCY3lrSCs5emIvVy92
+            M2VCa2hwaHVGOTgyVlNwTE0ySmQzYW9zMGxVCmlvOVdBVVRUSHlWWG9wcWhQK1hW
+            dERYdDhOdXE3My9iU3YwMmNOYVZqZlkKLS0tIEpZeGxCZHpIV0E0bjNaK2NyYUZu
+            SjJBTjE3T29DYy9PeHRLSXEwZkVFZHMKHRQX2I7W3NULFuLwI+/6dY4AG480TYgs
+            KHy5xKcfj8IeJ8g2szxcOQ5dWP6N1F9bSuez83umSCIJVNOhbz7khA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1kmt2khucyvscmwvrjnt0v90zggttuap9utx7rw54g9amhtrkzdlq94fe4j
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYTEQ4YTluaDJWWWNOMU1C
-            T1ZiRXU3c25ZNUl2TUU0NzRhNlUwRERCTkRzClNaNklsT3J6TmkyQnRhdlh6RVRV
-            KzZveGFaSHBmUHZWbWFWYW5LRlJvbjQKLS0tIGNTeFdPS0g0VHpmOGlEMWhGRUda
-            anpObDVFUWwrOG9Ta3ZCYTNZeFQzVmsKpNwoU4laN1EMnHyrtcRBS7W4svyWKkg8
-            2yFpy1wxFyme1HQ1nXTrLdpATequZ7/+Rd2TamRXgfFGbIinTkcBCA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXM0k1VDdDa2l4L1RMY1hi
+            VEdreld0cnRiOGVtbzlxSlIyUDBPRktLTzFjCkpNOFhoVGxRdWVtdTFrOWN1M1NH
+            U2JsbWV3MUhiL1JTYnkrZ3daZkRDa1UKLS0tIEtkMFl0SXBSU3FIUU5RS1ZzNHZ0
+            cjNHdUxaSWd5Qy9wREFyU3FPci9HOHcKrd+gWMEhyRfKHrUXbRiwktTGw4pK9A+c
+            c0IKcGmZdI6lPNIFiVh5yYOndT0NMyEBAiPNXXS5+AYmNccI3X2g9A==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age19v2gpucsykaqu3hsvskl67ss8mpqstp59vn687am6px9nmg585ksvlhctz
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPRCtnRTlha3Q0MzJrMWN1
-            UmtPTjVnWXpqazFtT3doL2NPNkdhSGtZZGp3CjdWV0hKYVVEWDhiOFRtRmVjUzdJ
-            RTRiWlBvU2dIOWg3clZNRlNVOHVxODgKLS0tIGd2cmpHaVZodVRja1lKN1g0ZzNu
-            Rndqd0M1R0FyZDBNZWlQTjVodWd1M0kKbnnarUcvCCpeZ9WVxu2SAd94oz7lP7sG
-            45yFJTd5fq7UALImzrGnm+sEXzC3IKVSVTKWtgxnPpbyjlLIxi4XgA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1b0VQcUJCa1VvYUhTMHlT
+            QmVlV283RUFxYWhxTjRmOTc0VENrRlJhV0JVCi9mK2Z5eHd1OTJ0NzEzU1J3cDEv
+            d2NZWFJ6U29qSEhiSnR4dC9yQW5oL2sKLS0tIDRCWGQ2OXB4VUlwYWZkYXBBbXkv
+            Qk0zN3U4SzhzTUlUaGZpUHRVUDBVeU0Kp7uE1zpFtNYBZFerWHaRyKHSa0ccIN0Q
+            B+Vi806d1pvaUBTfhkDCCkSBFB12wP82yA2XrJ8ask6ztc6X/gui0g==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-07-14T00:03:14Z"
-    mac: ENC[AES256_GCM,data:LNh/dHuWmt4nL71+r34vBDg7ngJC44fAw6998BuveS/yDP+kYmwd1VSZ7yRRCoboScuapIVbWMNwiyG2nXYA7W9aM7xkzHyDk5f8R6PQvShkCJ2T+TCa2IgZv7epZnNIMs+Zdqhe/Erf3MYV6rmWAY7acXEOdwzXQ7tHX8uvkfc=,iv:8UfzgZRyqUk9VwJaqDwQCjJlD/Az6zR+amof1pnnlqo=,tag:mXBM4U1+RIOzv/t0UnuSZg==,type:str]
+    lastmodified: "2025-07-31T04:05:03Z"
+    mac: ENC[AES256_GCM,data:OjQEe6aaTRsjMS1Zb/XlP4MhyrxIGYfn0mkB3GA81iOAGU02r79+uhx7vausjEgYN4IY+wXxyFju7M+xgRqTIWAfQrQtOuPIzsZUNvUd2FUzYAPhW0W2YrRJKa1gYYOHxKiyf4vaP1I/G7I4A0DG9pYRVDcDzvN6MzIvy97XGxI=,iv:/GYxPBSArfTZzUwRrLl+jkq7u24EU81+d00nnuyO98U=,tag:5CP5DihSPSZMhyc+3CyCEg==,type:str]
    pgp:
-        - created_at: "2025-07-20T19:35:42Z"
+        - created_at: "2025-07-31T04:06:37Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA9BR1U1EkAnnAQ/+PqhTAWVvO/Z6NxVaSosQzwoUI1yDm5A7ZGVaLpiu4i26
-            omfBAWfkRVi+3A0KSokmnl9+TnWkT1ojJSutNJv5low1GGKuODhUTz4aDgBLqb+c
-            LHcFkVHnFHzp2SEMZ/8ma+H/cnMHjXbQ+fYJk/P2OCxQ2L++gOUONCDI6UujKN+5
-            PWPv542mCz0c+d6vvAFWAMEz9SeLqlKfaifUPZdEtXUPFHsy2sl8W7RVRLMFO/OE
-            EbVq44JSF2paHNGAOeNdd/n9a2KBDy5Nf/7aklS8JW1cRtOchZUFvcJiL6/lmV1u
-            aCZPUxuxcvc2s3TTNYCFeu9vd7Q6Ni3p/Tb9GYvjsXGnkWGJ3t6vGqwPxBxJ0OQZ
-            S8MIqbOPmFund4vVyaWpEDtjF3WzW6TODMSXfCwmQJQLhKzAKWvgXP2PXBZIxB0h
-            lRweBy1k0ljnjDIun3SpWDvhBItjYkUnAEVwWE6VSPKlsXKApZ1p2mIicMzK+f4e
-            3OF5kjZ+U8e2jG36o6k+tkfYO+FuMT9Bove0vKLYjscxrBnwbuQ6+tnjxf0NJfB/
-            IStzs+tUziQLfIR7MBi7DDCRd2dgU4MxK6kWDtFbpXqm4IFnBoihA6p53dL88LVv
-            8PzYt3E5MA4+7nKrNZn1IHL2io8yG8g3A+RVFUx6ZiB+QuZmcjsPn/5sEbH0bczS
-            XgHMavFFBZVtuO0S5fetDKOqUObjyFBkXSrg+dBc9kGBHDpPejh0xD4RefXgRtwX
-            ttivAlOKtGG4yjGz/3G5YhYPLxDTE+p0WoNxjrw/puKKXQy/m5iZj2Xomh1ckgA=
-            =Jf6Q
+            hQIMA9BR1U1EkAnnAQ/+NSwCzekHKQuS1DEx2z3Llg2r1NYP21Pvzb3WKxzIlH/Y
+            rH2FJ4RhFJsG8GVWgURySHtqNKcafpB+8mm50b56IKKUiZe6A2ULIW4tBmU7wEb4
+            uEgFQ/YtJg4JyQxwYuZHX4ra3IsHIdbV/dsH9bv1A02Z95Eyb7nQutAiq/pz/DbS
+            /J2ndBzZmYO9cb4aHJ4h8cqdvWDcH+vWcNW8uqCaLKiNPYQLcPZOvMfGNia306Y6
+            9QSMIIvWP9eAcHIeBBP3U6blQJ/XXdoq0CuWfJim5fJGyfrkNgGQufYOADpJHJgL
+            nNIRkI4RF04ky9ghoSPCxpGy9Rd4YQU1iqA5QWC+VqBFH9e8aFmptlCVSAZ0t74Z
+            iPDBWHLBVkjxGyTvNWtpmOmyB2ZAhR9OQjkX6EDnVL/YqPVSvwvlvkzDoscmzvl1
+            64OU3hSJ/vwCsXyb2iN+62JV+NP3UgvXJnJvpEdcohKfTfEJScegv2P/xk+vt8k9
+            PXrW66jtBgT3XFssRAq1TUCfivYehzbdmS2iRIjnST0cjOJB/vX3Mc1gZ88zBqGS
+            fiqXryegdBUHULfJnGPK4ymQLEipFNxZXkFSLL6KTOCUpNeOJ46NqYgizKt4Ewio
+            BiJ0YCg91GrftElJIHhsehUiK+6C75TTL+c281l37zjv/tMZ1nmcUX0in1s/gJ3S
+            XgHrdCoe/vXYCQ2hTS+o8kHV1ksQPPGAvoEWvJrFPwUQhjJiqRKy7j5zwaYWSTth
+            p5YfPoLRWjwGS9V7VD99gYQVDgMzWpkzO/JqZxmNgV5ki5tN4eoR+rAUg19E064=
+            =DDSk
            -----END PGP MESSAGE-----
          fp: 5F78261B65C565041662A3B7FF8FC3C735BD4A51
    unencrypted_suffix: _unencrypted
--- a/systems/fortress/.sops.yaml
+++ b/systems/fortress/.sops.yaml
@ -0,0 +1,18 @@
+# Get new (host) keys with:
+#   nix-shell -p ssh-to-age --run 'ssh-keyscan example.com | ssh-to-age'
+#   nix-shell -p ssh-to-age --run 'ssh-to-age -i /etc/ssh/ssh_host_ed25519_key.pub'
+# Get new (user) keys with:
+#   mkdir -p ~/.config/sops/age && nix-shell -p ssh-to-age --run 'ssh-to-age -private-key -i ~/.ssh/id_ed25519 > ~/.config/sops/age/keys.txt'
+#   nix-shell -p ssh-to-age --run 'ssh-to-age -i ~/.ssh/id_ed25519.pub'
+keys:
+  - &system_fortress age1v3nya8n8fys8une6cp0t4agrqh4zjk7dk3lel5403xjkf6k87qdqhgjrk8
+  - &system_ll_latitude age19v2gpucsykaqu3hsvskl67ss8mpqstp59vn687am6px9nmg585ksvlhctz
+  - &yubikey_lauren_primary 5F78261B65C565041662A3B7FF8FC3C735BD4A51
+creation_rules:
+  - path_regex: secrets.yaml$
+    key_groups:
+      - pgp:
+          - *yubikey_lauren_primary
+        age:
+          - *system_fortress
+          - *system_ll_latitude
--- a/systems/fortress/compose.yml
+++ b/systems/fortress/compose.yml
@ -0,0 +1,34 @@
+services:
+  secrets:
+    image: nixos/nix:latest
+    command: nix-shell -p ssh-to-age -p sops --command "mkdir -p /root/.config/sops/age && ssh-to-age -private-key -i /etc/ssh/ssh_host_ed25519_key > /root/.config/sops/age/keys.txt && sops --decrypt /app/secrets.yaml"
+    volumes:
+      - .:/app
+      - /etc/ssh/ssh_host_ed25519_key:/etc/ssh/ssh_host_ed25519_key
+
+  ##############################################################################
+  ##############################################################################
+  ##############################################################################
+  # External Services
+  
+  #httpd:
+  #haproxy:
+
+  #coturn:
+
+  ##############################################################################
+  ##############################################################################
+  ##############################################################################
+  # Internal Services
+  
+  #dnsmasq:
+  #tinc:
+  #wireguard:
+
+  ##############################################################################
+  ##############################################################################
+  ##############################################################################
+  # Local Services
+
+  #dockge:
+  #uptime-kuma:
--- a/systems/fortress/secrets.yaml
+++ b/systems/fortress/secrets.yaml
@ -0,0 +1,49 @@
+dotspace:
+    fortress:
+        tinc_key: ENC[AES256_GCM,data:TYiAAgb7hiAzeeqlLQmj7b/50Yht/EXPUz5WgOs4aWPdCmYmZ/Qy90cUOFP4JDGuwj6BqqcPQ2xMZn3UzHOMlhhFMPiAGrD9ClzhRcti8Y8N2hyElgpTOcFwUiHyB92R4y3SCHLEhCbz0QpqDVKlsHIZyNC+hQihTmGlN53Uq4wThVdriJv9JsSABvwXHyjh+uGmYzKM7lZU4no2xn4CKuh4pa5Rq8GvDlAjJQNg8qcCucTz9VjH8rPZRJoi9GFFrl6a71ollg==,iv:50iiuhG+QVWM27rYP8zjCGX/Zp3TnjG7hUk6x2Gz99A=,tag:3NeS6Rlj9y9lAqDuaKMItA==,type:str]
+        wireguard_key: ENC[AES256_GCM,data:91oquuoknEoMQ5NEwcFwwb/DXkpz0ImSgWpU3CPOrRTQ0VjI7FHluPhKsPA=,iv:STBb0c2lhno+Wylx7L82tBBEdPtCGa8BkmBxrYp8K0w=,tag:nj9gCA9jrqqN6HBmpcY8wQ==,type:str]
+sops:
+    age:
+        - recipient: age1v3nya8n8fys8une6cp0t4agrqh4zjk7dk3lel5403xjkf6k87qdqhgjrk8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEa0k0NC91YnhlRnl0NWYx
+            UUNXSjM1UWFNektJQm55RTB3bzlkZmYvSm5nCjNMUitYdVdBNnNOUVFpYXNQb0Nk
+            eWlSM0hQT0RhSStPRGV3VFVZU1hBdWcKLS0tIFNUWlVVK0UwNnJVZVppRHJuSEoy
+            N0RqWEwyTkRESS8xVmJ0eThRa3dOZkEKiqjDn6WedlB+mmodYeMK49Rbm90CMB7c
+            AQstw4G7v4y6jnhLklHYQUsIKjMj2qysB4qLl63q7PjJf+THsY4UUA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age19v2gpucsykaqu3hsvskl67ss8mpqstp59vn687am6px9nmg585ksvlhctz
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1bGVxNUxSK1lxRzFjKzRP
+            a2dBQWdtRlR4N2N1dFcwU0UyU1RNUXRLREdRCmxEODhJaHQ1WjdyYkZyZDd1UjJs
+            a3RCMkFIejJybDJOdWtKRi9nbVZGODgKLS0tIFp1YWdENUtQemR3VmFsRHZKdVlG
+            TE1xT1JWd0dSaVN2TDErNktucWE2K0EKwjd572SoW6SZZzQ9Nxr7Z7Mc1F2h+FSJ
+            FS4iqRRb6Py8l4DrQ76YSwze5Uxl1jXK8WaEP0V7en55B8Yn2D04Fw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-07-31T03:47:30Z"
+    mac: ENC[AES256_GCM,data:GGQz5aa52oYfnBPTjxbLGaJGOUIxotvwRQQ1NzNMJnmtmEeZosDlLAhk08sG5f9u0Q4gYlxxB+XVPq23dbleGXXla/YkOR+z044ppriKpzTa0bSzKyXgSgFn4qtWC148r5iqGaeYPXjHdZARgUVHmQR8qTdAey6nk6k5Oz2I6yc=,iv:1m1ripzQV39VxNAED/xgwOTnu6+wgSmf7iul40Y2tsA=,tag:7eRFgOxR6CkHIg1/8i66oA==,type:str]
+    pgp:
+        - created_at: "2025-07-31T03:49:46Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9BR1U1EkAnnARAAsvw3aKlrTM5+Z/DqWzDPpgpAhO3qO7eFFuZzwTnoKxzv
+            9Dg+9qwkG1QI5R3UVv7J5a9hCqjfnskZnHSC7lwo/xkA9cCifCTohCtUe+4s8+Gd
+            HgcWrx287oqnuMBOPjZ6WXIYXKLUZPgQ4RciggbyoOStrqwDO2s6RYMVpWAvEBTz
+            18eydqdD57KL6YUmq6sc9wGKFlhIRvpxay6RltohRRPq1+bReiAuEP69G4fThELo
+            ND08l3Q78lQx5cvKStTFbPCOHu2da991gzfRmLpyPjKtGZ5pIfEULui13oUc6iAX
+            23BSn3iHXuEuqYKCbM19D7xRoCvlDpf7gY6M77ZzqEjG/u3gey1JAW0YzDu4brXj
+            3JTKe72ASc/38D9P9NWhCYDk1uOY0aWO5Eg6j5QZ5fF4eGH836HV4ouU7g74Eige
+            gWTMi3TKmWrbvnRnRMNb6ixR7EbHOKRawrajACtzG55R4TVZDXJU0pv5Fas9TBXa
+            wruWH9a1M0prD//ueTss2b2NOMqkyl3O19sVvotW5xgkiXBpjDsj2bCR/uhmLTkp
+            QKlXa11P4ZiDMNkMbU/1USwMNfYH+pGuVS9CbeIvycnUSDDMV90eRZu99GyIc0+3
+            BHvE6mThfKRkpz/B3hiZuacYK/nINxZ5So1XRR8jO730wwuQ2KPkgroJYd4flLPS
+            XgEpnBwMa+c0y9KBDfoGgoB+urG0bDolLL1DqhvBq93jaNT9dF+VSHHMHAcOvVVd
+            oHagTK56+RWUyg/MFThWeIcNUXKdukwlFdQN3Pko7agawxV4zi6u1dYi9fxFq3g=
+            =N1Pk
+            -----END PGP MESSAGE-----
+          fp: 5F78261B65C565041662A3B7FF8FC3C735BD4A51
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2