From f1493146abe8a043348e0ce86b088cf9345cbd74 Mon Sep 17 00:00:00 2001 From: mjallen18 Date: Fri, 6 Mar 2026 09:25:58 -0600 Subject: [PATCH] auth --- .../services/homeassistant/default.nix | 37 +- secrets/nuc-secrets.yaml | 344 +++++++++--------- 2 files changed, 205 insertions(+), 176 deletions(-) diff --git a/modules/nixos/homeassistant/services/homeassistant/default.nix b/modules/nixos/homeassistant/services/homeassistant/default.nix index 9fb0bea..333b507 100644 --- a/modules/nixos/homeassistant/services/homeassistant/default.nix +++ b/modules/nixos/homeassistant/services/homeassistant/default.nix @@ -20,6 +20,36 @@ in config = mkIf cfg.enable { + sops = { + secrets = { + "home-assistant/auth-client-id" = { + sopsFile = (lib.snowfall.fs.get-file "secrets/nuc-secrets.yaml"); + owner = config.users.users.hass.name; + group = config.users.users.hass.group; + restartUnits = [ "home-assistant.service" ]; + }; + "home-assistant/auth-client-secret" = { + sopsFile = (lib.snowfall.fs.get-file "secrets/nuc-secrets.yaml"); + owner = config.users.users.hass.name; + group = config.users.users.hass.group; + restartUnits = [ "home-assistant.service" ]; + }; + }; + templates = { + "auth.yaml" = { + content = '' + auth_oidc: + client_id: "${config.sops.placeholder."home-assistant/auth-client-id"}" + client_secret: "${config.sops.placeholder."home-assistant/auth-client-secret"}" + discovery_url: "https://authentik.mjallen.dev/application/o/home-assistant/.well-known/openid-configuration" + ''; + owner = config.users.users.hass.name; + group = config.users.users.hass.group; + restartUnits = [ "home-assistant.service" ]; + }; + }; + }; + services.home-assistant = { enable = true; package = pkgs.home-assistant; @@ -311,6 +341,8 @@ in "scene ui" = "!include scenes.yaml"; "script ui" = "!include scripts.yaml"; + auth_oidc = "!include ${config.sops.templates."auth.yaml".path}"; + http = { use_x_forwarded_for = true; trusted_proxies = [ @@ -328,11 +360,6 @@ in purge_keep_days = 180; }; - auth_header = { - debug = false; - username_header = "X-authentik-username"; - }; - # https://www.home-assistant.io/integrations/ota_updater/ zha.zigpy_config.ota.z2m_remote_index = "https://raw.githubusercontent.com/Koenkk/zigbee-OTA/master/index.json"; diff --git a/secrets/nuc-secrets.yaml b/secrets/nuc-secrets.yaml index 4a83a41..4143cfb 100644 --- a/secrets/nuc-secrets.yaml +++ b/secrets/nuc-secrets.yaml @@ -1,173 +1,175 @@ -hass: ENC[AES256_GCM,data:WfnVfA==,iv:fv66AU1oNjqWSlUmfBIM+i9oyNBZE2OYycGA01RFq30=,tag:fsMd8SoNcBD7wVkbp6AxnQ==,type:bool] +home-assistant: + auth-client-id: ENC[AES256_GCM,data:8vu3Zmhi3bkGCQ2nmhlvasOU24wv3NeEgYhVISKBGARESN5Lzo1m3A==,iv:lpoUR0NIrWo/8jMgm514j+9Jvr9gGV9SnOM6s7pZ3AI=,tag:FMtwTyHtOvgMwmeHUUYTcA==,type:str] + auth-client-secret: ENC[AES256_GCM,data:9dC2o+SihvatdHKq+NOhueoHSEpR2T8FcuaUw8EWAla5iaVYgNFb3WJTcyQlGpzVlVoHWxJGJPOg6Hds+3mjsQAB/GdyDf7GqtRv3r2Ly0Nm6r2IYO/tSIubQg+ol5/2wDz9vEwlXdGbCxX8bt3ZZQjh50YA2KDjAbRdhHkoU5o=,iv:hlcDmikRmE3qHGxB25TnCYscIGRKSAclsxinEKtInAQ=,tag:dxdZkovhsyamnlsYrNlUEg==,type:str] sops: - shamir_threshold: 1 - age: - - recipient: age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3QnVqUmhGMlNZWDh1SDBT - bFczbUx3UDJPMUlEc2FmZ0hGR3JZNjA0ZlRrCnFWTlluRXRIekswa21ocGdYSHNw - WElrcHp2MU8zVE1qd0RwaFcxOG1CbzQKLS0tIEJtQzRUUTl3amQwSkRhc1lVbW9p - a2FUOHJBL3o2YWx3bm1sdzJreTljYnMK1A4ElCJzsnvh+MLzSEg1v3eknrpmaFnm - cQ4UVSn3gKvFScwOpJ46U6/p4z67enPvG2jCs2mdTnZkkmw/BOFX4Q== - -----END AGE ENCRYPTED FILE----- - - recipient: age13g9a4d4jrvckfddpgn8sm4kjtzajr67le56pfdg78ktr5pd09phq32j89u - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPOFFLci8za0Q4VTh0WnZM - SHlCVHFMczRpNFliVCttOEVQenRkVHVTWEdBCk52Z2pxYlgzUm1GbjVlMm55RjBX - QVlHT0Q0c08zMSttSU83WTEraGgwd2cKLS0tIHc0SmhnL3V1blJNbVNWY1RjQlE5 - QTlJTmVvWWpJbm12OWIyeVMrT1lzSGcK0hZVuuTffl8fY2Rv81gGwy0Uz0cWijk+ - 7oAMNqonkX9P8VXBqlWobZGThaRIQNSXFtkWLqjM7c6sJ6D9zI1Nhw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1wpvfpv5n32lruk7c0da4uaeapsmhjxdvg8z4ljehn06l6g2y0e0sum404l - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwT2dnRGlISFEwVTVyL3Z5 - dUlsSWFMYXZ1aHRiQzBtQTBld3dqZFEzajBzCjF2WGJkYkNHdEMvcktzRnYzVWdP - S1gvaDV0YTFSeXlhNnUyUFcrU1lIQWMKLS0tIG5NcWpZYVdZTERWOVF4SEJ5b29D - WmFHRURjc1ZwaUVNM1NLTUhXN25ia3cKNFsvlo9hFbNLj20hmIbLRX/1gd6S5Ocf - e7boo5Udo9OjF9ogWIdCTEM7goMYqE9ig4Mm1TrkEIajZMQ/wFAVag== - -----END AGE ENCRYPTED FILE----- - - recipient: age1jv8ap5zwa49ftv0gg7wqf5ps0e68uuwxe2fekjsn0zkyql964unqyc58rf - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMMnJ4UFo3TERBNVhqRytN - SFhudlVGYjFCZnNia0lBNkVON2swUnpDRkh3CnVDK2REK3lmYkc2ZjladThsRWtO - eUdMQWtZMVVaejZJMXR0Y3NlZUtzbzgKLS0tIGp4MHcycGgxOE15bW41TWJYN0VW - cHFrS3NBZVhOd05JYVVDRnN6QjRqSVEKtQ18L7ZKfVqvbvJi2IldGq53GZQQw17H - VeNhTXDqVkxBxetzNXasQFDkWNObKeetNB4EP+8oMC/HP3wjtPAktg== - -----END AGE ENCRYPTED FILE----- - - recipient: age1pm3fehmmk0vmnrscz9vm96rakn46aaldr5ydpscmde3v9x0k3faswwdzxs - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiS3lNRkY2ekNIUUNTRDll - bUFLUVZzc3BRWGhLZ0tla3FIMFFiSnpsdGxNCm8xYWp0SjVOYUQ5bFhiLzcvYUtx - SXcwM1pvY1B5azhFWUtyOVhnb0Z6ak0KLS0tIGVKTHAyS0ZrOGg4d2NSR0prdlJ3 - b0VOenBIb243MVkxQlhlR0pndlR2WmsKTbOK5rOZqJ3pyRKDZ8Nobff/Oxwb1Vj/ - IMmII/O38W/T2B66zcWjCEMpqI99bthznEY/YHhivFOmOZF1e2xnYg== - -----END AGE ENCRYPTED FILE----- - - recipient: age1mn2afyp9my7y7hcyzum0wdwt49zufnkt8swnyy8pj30cwzs4zvgsthj0lt - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHTzdkY3hETTFQNjRvWWo1 - bXpxVE9xZEtNY3VrK3ZuTVZSV1UzNFkxQ3pjCjI3eUFSeHdtQ2V2dGtuY2N1b09u - a2llNllNYXZLdllwSmJCZkM3SCtFZjAKLS0tIDBxUjEvK05lVGRiZ2IveUp5SGVq - enRJYUNQeVZyK0JPUFZCbFhjOVo0MUEK6I9V4KAfoEyhStwViy6wA94PJs8kC0Lc - hwnYWCotPJc25Y9DCWt73n2oy0UH6RnAJ3aFUu7w8s1NbsH6UvTHGg== - -----END AGE ENCRYPTED FILE----- - - recipient: age1ykkjw57t3z3deup3gtp7dujyaslskn74e0d9hsmqaha2pj3rvazqgndw5a - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSWmxsRVFzSS9sTTlNbFV2 - Z3d4YjNBOTh2eXdCcTVmVGFlYTc5dE5wY1RrCnYxd1ViUjN3SDhJYzdRM2FYM290 - Q0dBQld5RUhVK2xrUzAycWZFMm94U0UKLS0tIGZ0UWZ2Yi9DWXR4aDVtS1NIaGN1 - bEFsMFlubko0TFBTZUlxM1VHUFIzQ3cKEl/h0+Z78lEDs1NkP4OI0IDJ3f+WO4GV - oKTrTZgnVv3R1fCEqJQSDQjmbTIN7nz/FAOwCpEIwTpJNFtOcnpu1Q== - -----END AGE ENCRYPTED FILE----- - - recipient: age1t2d5scrukk0guva5sr97a8tge5j8kd865adezrcru7p269pzwvpsamkgje - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4eURxVlJaNk54ZnpHOWp4 - bTNxTmt3bVF6SDRZa081c3BpdkpBMklVQUdjCmI4NzhsdW0waVBHNzd5ZkZOQkl4 - dk4yM1B2UWk0RXBkYWF1TnJmWFp2aWcKLS0tIFNyREwvbDF0OXVnZkhHVnJ4R0NW - Ly9iZW5aRnlPU0Z2VFBZbGU3QTZ2ZVkKat4y8tBeGoNW3F9k3bsNJy4dVRSzvyPo - tfda7IJIrgdXNxu19v3Zxd++6SNxN/XqP8digBJ/TVxdWeRzQofW9A== - -----END AGE ENCRYPTED FILE----- - - recipient: age1c8qw59ffcq9l77gfmtyc3djtvt3md0u6dwhrjcgsm98ntyf72ufqugj7cg - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ1VwQW1IOE50NGdSSW9R - WDdVTUxBZEJJRXdoU1RsM1NjRlhDbytmT1VJCkVuK1A4MG10Kytrayt2YmJRWVU3 - NTJ4UVdxZDZ0cUFuY1VSZ1dXZFJ3aW8KLS0tIDVSQ1Z4RXgzblhPMXBudGMrMUMv - bG9uZWp2dU1SNTQ0cHhKeENnS1pOSzQKPntp1EWTbdeRnTfzvKm9w1tyyuGNEn1S - jzDm4ReA4aqZgqpCBW9TPxBlIgWSB7B538fMEUfH2ji5gMDJFxwlaA== - -----END AGE ENCRYPTED FILE----- - - recipient: age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvMzdEV3BWUWpZMVNXWEp2 - NGxDNVNSZ1hRMExybGRYUjVqSW51eFhNYUNFCkxGYzJWUUc1RVNPVWd1YVBXQkRk - dFU1NTJOM0Nyck11cHFZWGVNWWdOQVkKLS0tIEo4ckt5M0F2VVdCRHI5ZGQrNUxn - bnJWc3BJUEJPVE15b29saHNjdUc5MFUKbUEBLSnFxb/ujPB50L5rSiSlYY+lP7c6 - 0XIETgwctZHjPef/0FfSROWsdQ3Q1W1vOaUWE0fee3mtdc+ZIC/vAg== - -----END AGE ENCRYPTED FILE----- - - recipient: age12gu9hqhd56yl5x3t5yenkn9yg57du08h77vzjqsmnu5hdppne38qcur5a0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2elN2Ym4yZHFwdTFNNTMz - bURvaVRQWURxQUM1RmJkUHY2TXhLNUJuc2tBCmtHUUt5Z0x5UDg5Z3A1WGRYbFNQ - UTdxWlVPRHdDV2hOZ1Z5K2YrNHdweEUKLS0tIElMUUVKN1N4T05jckxMVHpZWTJL - SDlQYytMWUJwSm83amxqaXd2c25sMDAKiON37il7spgi5yYB3Iio3vXew03wCnKq - 9+s7CvcWZRY2xVSZp6P/Wj8W29jVkTM2Nivbz7AE8H5YyzEph53Wpw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1cWhuWU9wbUV3TUV6OHRX - SGVYVk1kNG5IQkNXMGdJT2dQQTNBNkpoNHdrCkRLYmk3NmRYWUI5MlozOWRIcTEw - NzQyeklmYkU5ZkNpM1FhTkhtMUthTkEKLS0tIGIwT1B2Q1dLNGVkNHlyRFl2b1cy - YzJwL3ljUy9XTi8reU9IdmdEcFQ4NVEK7SR6dAcuMPtJ/QvlNUQY1n4kD9yI2WBT - PioTf71bUkHkLL4va3F/+Tvx9uv4RadcnCjmH6PfV+NerrfZiwh5bw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvaWRlcHlKNFVTWlBjWlZt - aW5DeXB1citzU3J2OWNNMWw0Z0FaTUdXV1JBCjc2aUZrendSUUZzK0RoN1RqMDQr - bFl5V0g2Y1VhME1kWGRmWkxUb2RGVGMKLS0tIG11NE9zVHhCTlV2aVRZSTJHMWFU - cUlJclNRdERMdmROb1RFSWhyZ2pGcFkKzgprch6/eszE30g0i2Z9WIB4E9KiS7nB - l45qs1qgNuKuBJBEaGYlAqBw8DmAgP/nPKDf4SLJgzZYNVBV/xqNJQ== - -----END AGE ENCRYPTED FILE----- - - recipient: age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvaVdqTEcxeFRIM3dEZVgy - K25ETmFwaHlweVZuM0ZYdlczb2x4enV1Q1JVClZwYVRybE02cDdtQkQrMVBkNVM4 - Uk0xdHlzNjFPSlo3Q0piQ0Y0S1BmOVEKLS0tIFpGTkFERWNyTERPZ0xqQ1ZBMDVr - VlVLdTNRcnpYK2tRVDZyZnNneTNOZFEKuK9uHZFiQmEBqYfiX3pREj4tgkK3waDS - zxh6ZmhQ2N/2V1/SPJVrIfBoYqsofdO9PqQ6xKNBOXQAbTJSDwYr2A== - -----END AGE ENCRYPTED FILE----- - - recipient: age1n5frpwgvps7c2348ynu9g7g47kqar4srdplw5kkcyn4x80eqzetqw3ej2m - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrY3ZoU1cwOGtvUng3d2E2 - cHUvNEMwL0thVHhPMFR5ZlNiSjU5aDlRQUNnCkM0bHAwa01WZmcveGNmeWtxT1hR - N0I5THlkWDFTcHM4NkFKQnNESXhJRFkKLS0tIEZnaTNyV3hIQmZsTWZUaEZVVzdy - TktaZnEzSkZHaXAwYzlKWlgwcTBFaUEK80U/JkAZLfSHJ4DCUNvN/LNos0XGVxVc - wiqhKS/C8/HWEYBRb6AqN+6r6Xveb83CypFq6eVUZEI1LIxmBd+eRQ== - -----END AGE ENCRYPTED FILE----- - - recipient: age1lvks0rdf743cn9rvvx90mzu3mjldydlzslpmv9608wn4j0m8u3xsmu7yew - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBraDZjajVDYUhXMnN0WkRG - WEM5YUo3by8xTXBFYTd6cEI1alpaT3pzQUVrCmFmTmVMVmJhZVo3R3JxZVZBaG5n - SHVWRVZ0WEZZd1ZscXNPZ1RiVzBlUUEKLS0tIEtHRkZoRnhjdlBDcXRveVN5TW4r - WFJONHNsUjJuditvVEgxQ0Y1RVhXQ1kKwBM8ljdCTTbjdasCdtLj4wZ+fX2XQIXf - IMgacJ5kxYHaYpNpY5wyK2kHzPY9Ovz75WyXicPj0SCojhoKvMAWXQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-07-16T02:28:31Z" - mac: ENC[AES256_GCM,data:c9bacPoSQ/6iQW6ICJfBRMPM4iPbXh4xPqU5XgGIYD9ssRV5sp2KI9eloTZNdxh5T49nfO8qkwlXsOFXTVjOlz8KAiRO0T6/Lq4mF8AsyRE0uPn2sZqrjDhcjTd3FYIVPCLna28UqvdO1dL8/6yI1t7Z2JrgrWxCqHG9dFtBWsA=,iv:54SRSm6WLe42EtvIm9vRzkq7xTiLYEItUyNuMyNsFas=,tag:ZTL0ON3s1TcNzEX/bLrmLw==,type:str] - pgp: - - created_at: "2026-02-06T15:34:31Z" - enc: |- - -----BEGIN PGP MESSAGE----- + shamir_threshold: 1 + age: + - recipient: age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3QnVqUmhGMlNZWDh1SDBT + bFczbUx3UDJPMUlEc2FmZ0hGR3JZNjA0ZlRrCnFWTlluRXRIekswa21ocGdYSHNw + WElrcHp2MU8zVE1qd0RwaFcxOG1CbzQKLS0tIEJtQzRUUTl3amQwSkRhc1lVbW9p + a2FUOHJBL3o2YWx3bm1sdzJreTljYnMK1A4ElCJzsnvh+MLzSEg1v3eknrpmaFnm + cQ4UVSn3gKvFScwOpJ46U6/p4z67enPvG2jCs2mdTnZkkmw/BOFX4Q== + -----END AGE ENCRYPTED FILE----- + - recipient: age13g9a4d4jrvckfddpgn8sm4kjtzajr67le56pfdg78ktr5pd09phq32j89u + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPOFFLci8za0Q4VTh0WnZM + SHlCVHFMczRpNFliVCttOEVQenRkVHVTWEdBCk52Z2pxYlgzUm1GbjVlMm55RjBX + QVlHT0Q0c08zMSttSU83WTEraGgwd2cKLS0tIHc0SmhnL3V1blJNbVNWY1RjQlE5 + QTlJTmVvWWpJbm12OWIyeVMrT1lzSGcK0hZVuuTffl8fY2Rv81gGwy0Uz0cWijk+ + 7oAMNqonkX9P8VXBqlWobZGThaRIQNSXFtkWLqjM7c6sJ6D9zI1Nhw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1wpvfpv5n32lruk7c0da4uaeapsmhjxdvg8z4ljehn06l6g2y0e0sum404l + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwT2dnRGlISFEwVTVyL3Z5 + dUlsSWFMYXZ1aHRiQzBtQTBld3dqZFEzajBzCjF2WGJkYkNHdEMvcktzRnYzVWdP + S1gvaDV0YTFSeXlhNnUyUFcrU1lIQWMKLS0tIG5NcWpZYVdZTERWOVF4SEJ5b29D + WmFHRURjc1ZwaUVNM1NLTUhXN25ia3cKNFsvlo9hFbNLj20hmIbLRX/1gd6S5Ocf + e7boo5Udo9OjF9ogWIdCTEM7goMYqE9ig4Mm1TrkEIajZMQ/wFAVag== + -----END AGE ENCRYPTED FILE----- + - recipient: age1jv8ap5zwa49ftv0gg7wqf5ps0e68uuwxe2fekjsn0zkyql964unqyc58rf + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMMnJ4UFo3TERBNVhqRytN + SFhudlVGYjFCZnNia0lBNkVON2swUnpDRkh3CnVDK2REK3lmYkc2ZjladThsRWtO + eUdMQWtZMVVaejZJMXR0Y3NlZUtzbzgKLS0tIGp4MHcycGgxOE15bW41TWJYN0VW + cHFrS3NBZVhOd05JYVVDRnN6QjRqSVEKtQ18L7ZKfVqvbvJi2IldGq53GZQQw17H + VeNhTXDqVkxBxetzNXasQFDkWNObKeetNB4EP+8oMC/HP3wjtPAktg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1pm3fehmmk0vmnrscz9vm96rakn46aaldr5ydpscmde3v9x0k3faswwdzxs + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiS3lNRkY2ekNIUUNTRDll + bUFLUVZzc3BRWGhLZ0tla3FIMFFiSnpsdGxNCm8xYWp0SjVOYUQ5bFhiLzcvYUtx + SXcwM1pvY1B5azhFWUtyOVhnb0Z6ak0KLS0tIGVKTHAyS0ZrOGg4d2NSR0prdlJ3 + b0VOenBIb243MVkxQlhlR0pndlR2WmsKTbOK5rOZqJ3pyRKDZ8Nobff/Oxwb1Vj/ + IMmII/O38W/T2B66zcWjCEMpqI99bthznEY/YHhivFOmOZF1e2xnYg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1mn2afyp9my7y7hcyzum0wdwt49zufnkt8swnyy8pj30cwzs4zvgsthj0lt + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHTzdkY3hETTFQNjRvWWo1 + bXpxVE9xZEtNY3VrK3ZuTVZSV1UzNFkxQ3pjCjI3eUFSeHdtQ2V2dGtuY2N1b09u + a2llNllNYXZLdllwSmJCZkM3SCtFZjAKLS0tIDBxUjEvK05lVGRiZ2IveUp5SGVq + enRJYUNQeVZyK0JPUFZCbFhjOVo0MUEK6I9V4KAfoEyhStwViy6wA94PJs8kC0Lc + hwnYWCotPJc25Y9DCWt73n2oy0UH6RnAJ3aFUu7w8s1NbsH6UvTHGg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1ykkjw57t3z3deup3gtp7dujyaslskn74e0d9hsmqaha2pj3rvazqgndw5a + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSWmxsRVFzSS9sTTlNbFV2 + Z3d4YjNBOTh2eXdCcTVmVGFlYTc5dE5wY1RrCnYxd1ViUjN3SDhJYzdRM2FYM290 + Q0dBQld5RUhVK2xrUzAycWZFMm94U0UKLS0tIGZ0UWZ2Yi9DWXR4aDVtS1NIaGN1 + bEFsMFlubko0TFBTZUlxM1VHUFIzQ3cKEl/h0+Z78lEDs1NkP4OI0IDJ3f+WO4GV + oKTrTZgnVv3R1fCEqJQSDQjmbTIN7nz/FAOwCpEIwTpJNFtOcnpu1Q== + -----END AGE ENCRYPTED FILE----- + - recipient: age1t2d5scrukk0guva5sr97a8tge5j8kd865adezrcru7p269pzwvpsamkgje + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4eURxVlJaNk54ZnpHOWp4 + bTNxTmt3bVF6SDRZa081c3BpdkpBMklVQUdjCmI4NzhsdW0waVBHNzd5ZkZOQkl4 + dk4yM1B2UWk0RXBkYWF1TnJmWFp2aWcKLS0tIFNyREwvbDF0OXVnZkhHVnJ4R0NW + Ly9iZW5aRnlPU0Z2VFBZbGU3QTZ2ZVkKat4y8tBeGoNW3F9k3bsNJy4dVRSzvyPo + tfda7IJIrgdXNxu19v3Zxd++6SNxN/XqP8digBJ/TVxdWeRzQofW9A== + -----END AGE ENCRYPTED FILE----- + - recipient: age1c8qw59ffcq9l77gfmtyc3djtvt3md0u6dwhrjcgsm98ntyf72ufqugj7cg + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ1VwQW1IOE50NGdSSW9R + WDdVTUxBZEJJRXdoU1RsM1NjRlhDbytmT1VJCkVuK1A4MG10Kytrayt2YmJRWVU3 + NTJ4UVdxZDZ0cUFuY1VSZ1dXZFJ3aW8KLS0tIDVSQ1Z4RXgzblhPMXBudGMrMUMv + bG9uZWp2dU1SNTQ0cHhKeENnS1pOSzQKPntp1EWTbdeRnTfzvKm9w1tyyuGNEn1S + jzDm4ReA4aqZgqpCBW9TPxBlIgWSB7B538fMEUfH2ji5gMDJFxwlaA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvMzdEV3BWUWpZMVNXWEp2 + NGxDNVNSZ1hRMExybGRYUjVqSW51eFhNYUNFCkxGYzJWUUc1RVNPVWd1YVBXQkRk + dFU1NTJOM0Nyck11cHFZWGVNWWdOQVkKLS0tIEo4ckt5M0F2VVdCRHI5ZGQrNUxn + bnJWc3BJUEJPVE15b29saHNjdUc5MFUKbUEBLSnFxb/ujPB50L5rSiSlYY+lP7c6 + 0XIETgwctZHjPef/0FfSROWsdQ3Q1W1vOaUWE0fee3mtdc+ZIC/vAg== + -----END AGE ENCRYPTED FILE----- + - recipient: age12gu9hqhd56yl5x3t5yenkn9yg57du08h77vzjqsmnu5hdppne38qcur5a0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2elN2Ym4yZHFwdTFNNTMz + bURvaVRQWURxQUM1RmJkUHY2TXhLNUJuc2tBCmtHUUt5Z0x5UDg5Z3A1WGRYbFNQ + UTdxWlVPRHdDV2hOZ1Z5K2YrNHdweEUKLS0tIElMUUVKN1N4T05jckxMVHpZWTJL + SDlQYytMWUJwSm83amxqaXd2c25sMDAKiON37il7spgi5yYB3Iio3vXew03wCnKq + 9+s7CvcWZRY2xVSZp6P/Wj8W29jVkTM2Nivbz7AE8H5YyzEph53Wpw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1cWhuWU9wbUV3TUV6OHRX + SGVYVk1kNG5IQkNXMGdJT2dQQTNBNkpoNHdrCkRLYmk3NmRYWUI5MlozOWRIcTEw + NzQyeklmYkU5ZkNpM1FhTkhtMUthTkEKLS0tIGIwT1B2Q1dLNGVkNHlyRFl2b1cy + YzJwL3ljUy9XTi8reU9IdmdEcFQ4NVEK7SR6dAcuMPtJ/QvlNUQY1n4kD9yI2WBT + PioTf71bUkHkLL4va3F/+Tvx9uv4RadcnCjmH6PfV+NerrfZiwh5bw== + -----END AGE ENCRYPTED FILE----- + - recipient: age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvaWRlcHlKNFVTWlBjWlZt + aW5DeXB1citzU3J2OWNNMWw0Z0FaTUdXV1JBCjc2aUZrendSUUZzK0RoN1RqMDQr + bFl5V0g2Y1VhME1kWGRmWkxUb2RGVGMKLS0tIG11NE9zVHhCTlV2aVRZSTJHMWFU + cUlJclNRdERMdmROb1RFSWhyZ2pGcFkKzgprch6/eszE30g0i2Z9WIB4E9KiS7nB + l45qs1qgNuKuBJBEaGYlAqBw8DmAgP/nPKDf4SLJgzZYNVBV/xqNJQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvaVdqTEcxeFRIM3dEZVgy + K25ETmFwaHlweVZuM0ZYdlczb2x4enV1Q1JVClZwYVRybE02cDdtQkQrMVBkNVM4 + Uk0xdHlzNjFPSlo3Q0piQ0Y0S1BmOVEKLS0tIFpGTkFERWNyTERPZ0xqQ1ZBMDVr + VlVLdTNRcnpYK2tRVDZyZnNneTNOZFEKuK9uHZFiQmEBqYfiX3pREj4tgkK3waDS + zxh6ZmhQ2N/2V1/SPJVrIfBoYqsofdO9PqQ6xKNBOXQAbTJSDwYr2A== + -----END AGE ENCRYPTED FILE----- + - recipient: age1n5frpwgvps7c2348ynu9g7g47kqar4srdplw5kkcyn4x80eqzetqw3ej2m + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrY3ZoU1cwOGtvUng3d2E2 + cHUvNEMwL0thVHhPMFR5ZlNiSjU5aDlRQUNnCkM0bHAwa01WZmcveGNmeWtxT1hR + N0I5THlkWDFTcHM4NkFKQnNESXhJRFkKLS0tIEZnaTNyV3hIQmZsTWZUaEZVVzdy + TktaZnEzSkZHaXAwYzlKWlgwcTBFaUEK80U/JkAZLfSHJ4DCUNvN/LNos0XGVxVc + wiqhKS/C8/HWEYBRb6AqN+6r6Xveb83CypFq6eVUZEI1LIxmBd+eRQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1lvks0rdf743cn9rvvx90mzu3mjldydlzslpmv9608wn4j0m8u3xsmu7yew + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBraDZjajVDYUhXMnN0WkRG + WEM5YUo3by8xTXBFYTd6cEI1alpaT3pzQUVrCmFmTmVMVmJhZVo3R3JxZVZBaG5n + SHVWRVZ0WEZZd1ZscXNPZ1RiVzBlUUEKLS0tIEtHRkZoRnhjdlBDcXRveVN5TW4r + WFJONHNsUjJuditvVEgxQ0Y1RVhXQ1kKwBM8ljdCTTbjdasCdtLj4wZ+fX2XQIXf + IMgacJ5kxYHaYpNpY5wyK2kHzPY9Ovz75WyXicPj0SCojhoKvMAWXQ== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2026-03-06T15:16:45Z" + mac: ENC[AES256_GCM,data:ircyr5fVawgOdc0+4QU0EFzrASk3LQ+Rks8wsdWR8lncYLKZDbQjSaJQPUqWAOe7vJ8xZuzSHSc+5cZ4Xpdl4PjFNR6sulIioS9C4CeuN/ZkYlHxvVNN8uqZpiZNoftMJX5DbXM6jN36swdk5InLwbzFs46MBnbNMsB0RC+xOYM=,iv:37kXynrwkPZg6l0p/ZnNx84Ls/aX9I5wGNP9jDHlFzg=,tag:CP7zSOEd8FLCBoWE1MQyAQ==,type:str] + pgp: + - created_at: "2026-02-06T15:34:31Z" + enc: |- + -----BEGIN PGP MESSAGE----- - hQIMA0B7mmjbybiOAQ//blUsfVtguOA4xjR33s6q91Kbi+e7bI4MGG21/R8hF1V1 - ZFk/uxn9yH6w0I+Jlkf4bHCGyknMhd+eadwhsSXqCkl5pdAZiVU16devSmBvyizN - 1zbwBPqUVtonEjxJoMkqBsivnzLHLhcxDvaL9CuHSMguHdhZTdYOSyMclkijDwTe - YmLFnm9H0iXMUImFzylKG3eI7GRch4SDUz3sRjHq/OPhWrD4zd1jBPwpqbphn6Tt - OlggLJiE8u9z47W2zUabxcx8E7fnUsW4veOLYamENdErvCqquUE7oK/+8pRFeKdj - bWmLkAmQRTjG9HENw1FX+kx5RTvwyqkPN/goYMcVu/Po1FoSW+PSDvrMa824NtqN - 97i03Tn6WSzLaxaO4RAwGdp8nYoQQqcPbLR+/5EsPnZ/s2vdAESk60XEGM54Ewjx - rRdVytxheEH12Es25dxxaAUTZyfRsBj0tJYUt+0F//ZXoC80KshYuMHHNaZ/KuTA - NDrmDKc2lu3jDDK/HRpC6t3VwplD9de0JArxMTTbfUP8v4CXeT1u/gVAJHYKJNMn - o3+GJ4yBHm8MERzAj/IZ6rmME67H/KBAtS0UXEzboz8l6EUKH6+pntGecjN0nTX9 - bLkQJ7tSLJDNzAREQL1O9nZyjQqfQtQ6qxUD5PrzvAOAk4jOL2RwTw0usSI9YiXS - XAG+CuHA4+IoMitlKPAW5rQxxLs4UDS0k/RavRl0yoND0CnSx0hWLhANKJIHK0te - smCkFQlvZy2veyjeTkuB9Xy25k9dZyY3jN1MVO53CObSJ43fLdX8dLORWasK - =d9lO - -----END PGP MESSAGE----- - fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684 - unencrypted_suffix: _unencrypted - version: 3.10.2 + hQIMA0B7mmjbybiOAQ//blUsfVtguOA4xjR33s6q91Kbi+e7bI4MGG21/R8hF1V1 + ZFk/uxn9yH6w0I+Jlkf4bHCGyknMhd+eadwhsSXqCkl5pdAZiVU16devSmBvyizN + 1zbwBPqUVtonEjxJoMkqBsivnzLHLhcxDvaL9CuHSMguHdhZTdYOSyMclkijDwTe + YmLFnm9H0iXMUImFzylKG3eI7GRch4SDUz3sRjHq/OPhWrD4zd1jBPwpqbphn6Tt + OlggLJiE8u9z47W2zUabxcx8E7fnUsW4veOLYamENdErvCqquUE7oK/+8pRFeKdj + bWmLkAmQRTjG9HENw1FX+kx5RTvwyqkPN/goYMcVu/Po1FoSW+PSDvrMa824NtqN + 97i03Tn6WSzLaxaO4RAwGdp8nYoQQqcPbLR+/5EsPnZ/s2vdAESk60XEGM54Ewjx + rRdVytxheEH12Es25dxxaAUTZyfRsBj0tJYUt+0F//ZXoC80KshYuMHHNaZ/KuTA + NDrmDKc2lu3jDDK/HRpC6t3VwplD9de0JArxMTTbfUP8v4CXeT1u/gVAJHYKJNMn + o3+GJ4yBHm8MERzAj/IZ6rmME67H/KBAtS0UXEzboz8l6EUKH6+pntGecjN0nTX9 + bLkQJ7tSLJDNzAREQL1O9nZyjQqfQtQ6qxUD5PrzvAOAk4jOL2RwTw0usSI9YiXS + XAG+CuHA4+IoMitlKPAW5rQxxLs4UDS0k/RavRl0yoND0CnSx0hWLhANKJIHK0te + smCkFQlvZy2veyjeTkuB9Xy25k9dZyY3jN1MVO53CObSJ43fLdX8dLORWasK + =d9lO + -----END PGP MESSAGE----- + fp: CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684 + unencrypted_suffix: _unencrypted + version: 3.12.1