ops-jrz1/secrets
Dan 85989ccc2a Add offline sops recovery key
Secrets now encrypted to three recipients:
- vultr_vps: server SSH host key (primary)
- admin: workstation key (local editing)
- recovery: offline key at ~/.config/sops/age/recovery.key

If server dies and admin key unavailable, recovery key can
still decrypt secrets to bootstrap restore.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-10 15:40:31 -08:00
..
.sops.yaml.example Phase 3: Extract and sanitize Matrix platform modules from ops-base 2025-10-13 14:51:14 -07:00
secrets.yaml Add offline sops recovery key 2026-01-10 15:40:31 -08:00
secrets.yaml.example Phase 3: Extract and sanitize Matrix platform modules from ops-base 2025-10-13 14:51:14 -07:00