ops-jrz1/secrets/secrets.yaml
Dan 92d7646d52 Migrate Slack tokens to sops-nix, improve egress rate limits
- Remove beads from VPS deployment (kept locally for dev workflow)
- Add slack-bot-token and slack-app-token secrets with devs group access
- Remove dead acme-email secret reference
- Increase egress limits from 30/min to 150/min (burst 60→300)
- Change egress blocking from REJECT to DROP for better app behavior
- Add egress-status script for user self-diagnosis
- Update dev-slack-direct.md with new /run/secrets access patterns

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-07 11:14:19 -08:00

32 lines
2.7 KiB
YAML

matrix-registration-token: ENC[AES256_GCM,data:H7BgtpsDLOYcywjOHru+u7t6BCbqhFrmPS3YXJWnMVcppD4lVh6ewZB/ZPM2ck5OcBQe8gmCYNGKchzPf0aeRw==,iv:9b8gPuxQaJIGep/YHpA02/yJx13bJZ3r6WmKEXRGFDc=,tag:/NxCSqkwPxhEOeWM+/3Hhg==,type:str]
acme-email: ENC[AES256_GCM,data:+tN+nRfn2kpGLdF3Vg==,iv:uZvSw4viBWCTT35C718cLOCrSLM1EnkmEZH644aVuPI=,tag:tf6+7ubiOLVj7k4rfNI3lQ==,type:str]
slack-oauth-token: null
slack-app-token: ENC[AES256_GCM,data:YRSu3h7xU9V6ymvOGa7lBRtUq794j/bh5gCOTBvNJXw+g6m3ypiJYOYVM6iN6hBLNQSPDtfxVnJiwiV00jcneYdTWN54RWzyU1O2yrVb10DA1GK2dOVFcfDjncdAVCsJwQ==,iv:wH6CTsLixT4kU5u8o0xd9Yyqy9wjomHIZoyg8aOP6ko=,tag:x9yh4qJolHzMMMramz+kjg==,type:str]
maubot-admin-password: ENC[AES256_GCM,data:Omh6VFsnlLgS+UktM5qHjj3+VK84YmMgWcQCvkiMchfb621RV0LBg1ZB3tg=,iv:cINVFlHJJGkAcasK8BJr3Sd2zqkpQOyRgF+V0JhBJXE=,tag:PnS9TdtuR/87yQfttJTLow==,type:str]
maubot-secret-key: ENC[AES256_GCM,data:krq8zjZelAYRNrFs+DYqh7j0bDd80YKRkro88hGiAxJOBCuFV6PdyyUKgqdSuGMhoFhZtMPmRKOQvAxKclOBEQ==,iv:PePSXEOcBKcReXYBzicDhGQ/yxJIZ/TNzARg4z9G7dA=,tag:ihVw9PAXScoZgrSzWkAMdQ==,type:str]
slack-bot-token: ENC[AES256_GCM,data:Ll4Ej2z8C810VsTtHNKdB+o4t43736dbNMBhbX9jFl3+l4N6xOpyHSi7EJE2B8Ce8mz1JsLeOvo=,iv:ct5yo21n4aBSVAIBgxzL+FG+P6gIMSP/f1UktVc7ya4=,tag:qOSkcR/m5KvpdwjxYVIxmQ==,type:str]
sops:
age:
- recipient: age1vuxcwvdvzl2u7w6kudqvnnf45czrnhwv9aevjq9hyjjpa409jvkqhkz32q
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArVkViNzZJL09hZVZzUWlM
RXVQOE1BM2EwakF5TkZ5OW1Mc3VORlcvdHpNCk1QMmFyTHl4bG9pUzVEQ0tEN2pp
WmFOdnc4dUovdDdWODVFQzJZOVgxQ3MKLS0tIEJ3SklPenliempCMjJOcmlJMmQz
Y0xiLzZOS0N0cVNBcXR2Y0RTV0lhV3cKsYObarH4BE24LSdUrj0TjCFj3tTdfnNI
sFFu96M3EO9hXlB+gujF9NFSZ/YyCwzK+typTtuyuTr9DmjxPwFeLw==
-----END AGE ENCRYPTED FILE-----
- recipient: age18ue40q4fw8uggdlfag7jf5nrawvfvsnv93nurschhuynus200yjsd775v3
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxcXJDN29vZWpzaFVGdEJj
YnFMWFoyc2EwVjBNa1VUVXh6eFkrTmRWb2lRCmNkaUQxM2xOb2x2TmV6dnhlaTNO
TXk4SkJxOGhOd3JMaEhoUUFYMmk4TXMKLS0tIE9IWFpwbU1FTFZFYTIwQVYzd1hI
TzI2NGdaVHd1RFZWRE50bjZ0cHhBOXMKRXVYFMNxNIX+8uVxf1X4hu+OfOKKs2TK
A2qdAMJIfdy9f7SPVrPnrGMIwl/prxIkbSRwYC/UNK5NNkjMrGoSwg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-01-07T18:19:38Z"
mac: ENC[AES256_GCM,data:BkDv0FTRszUUyolWwhlK/hpVZHZvMmsvCZm2g7hDD5kPZGDR1lchsQ6x5rcWEecJ1HBXrFyAWslcuwLT+hBiWObVLi0Fp5VFHodBPHjgbwoFLgfWl9bpCc1TGSLozFxfOVlzZtm2paMl635hQROH1KJLSDXg5r9ZnQNjBgWn0LE=,iv:C1j7YBlagXl31CtNGCROnS0sTA8s1HijBrZ/bkDS+wA=,tag:zPIyXfRFDmDk7qof9C3jDg==,type:str]
unencrypted_suffix: _unencrypted
version: 3.10.2