ops-jrz1/secrets/.sops.yaml.example
Dan ab5aebb161 Phase 3: Extract and sanitize Matrix platform modules from ops-base
Extracted modules:
- Matrix homeserver (matrix-continuwuity.nix)
- mautrix bridges (slack, whatsapp, gmessages)
- Security modules (fail2ban, ssh-hardening)
- Development services module
- Matrix secrets module

All modules sanitized to remove personal information:
- Domains: example.com, matrix.example.org
- IPs: 10.0.0.x, 203.0.113.10
- Paths: /home/user, /path/to/ops-base
- Emails: admin@example.com

Configuration:
- Updated flake.nix with sops-nix and nixpkgs-unstable
- Updated hosts/ops-jrz1.nix to import all extracted modules
- Added example files (secrets, minimal config)
- Generated flake.lock

Generated with Claude Code - https://claude.com/claude-code
2025-10-13 14:51:14 -07:00

17 lines
533 B
Plaintext

# sops-nix configuration for age encryption
# Copy this file to .sops.yaml and replace with your age public key
#
# Generate an age key pair:
# age-keygen -o ~/.config/sops/age/keys.txt
# # Extract public key: age1... from the generated file
#
# Then encrypt secrets:
# sops -e -i secrets/secrets.yaml
creation_rules:
- path_regex: secrets/secrets\.yaml$
key_groups:
- age:
# Replace with your age public key (starts with age1...)
- age1xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx