secrets.yaml: move ssh host keys

2024-06-30 13:20:54 +10:00 · 2024-06-30 13:20:54 +10:00 · 907a7082ad
commit 907a7082ad
parent 2f94a01687
8 changed files with 16 additions and 163 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -27,15 +27,6 @@ creation_rules:
          - *zimbatm
          - *zowoq
          - *adisbladis
-  - path_regex: hosts/build01/[^/]+\.yaml$
-    key_groups:
-      - age:
-          - *build01
-          - *mic92
-          - *ryantm
-          - *zimbatm
-          - *zowoq
-          - *adisbladis
  - path_regex: hosts/build02/[^/]+\.yaml$
    key_groups:
      - age:
@ -54,15 +45,6 @@ creation_rules:
          - *zimbatm
          - *zowoq
          - *adisbladis
-  - path_regex: hosts/build04/[^/]+\.yaml$
-    key_groups:
-      - age:
-          - *build04
-          - *mic92
-          - *ryantm
-          - *zimbatm
-          - *zowoq
-          - *adisbladis
  - path_regex: hosts/web02/[^/]+\.yaml$
    key_groups:
      - age:
--- a/hosts/build01/secrets.yaml
+++ b/hosts/build01/secrets.yaml
@ -1,66 +0,0 @@
-ssh_host_ed25519_key: ENC[AES256_GCM,data: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,iv:SAP3WMpYW2U/IRJmUeTlntlkHYrd7d3JD1zB0hJkHnU=,tag:LwVUTelkr8HAyYSY/mGQrA==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age17jtyn2y4fpey6q7ers9gtnh4580xj89zdjuew9nqhxywmsaw94fs5udupc
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzc05Sa1hWekNuS2Z6UktS
-            dE9qd2ZYVXdQUUovRVM2VUU1ZEc5V2lvWUMwCmpqYU1VM05zRTFlVE9BTG9TQlhE
-            VlFYTzA2YWoyZkFEQWxUcktsUGF5aU0KLS0tIEhLelVnYUpEa3lwclR3YTJjR1VM
-            eTZJaW5WK3RudWdiQUttTXRON0FJU3MK83WRMwaVX3moPadsa9rWuUPN26TwTSAX
-            RklXgTMqweZ7LRypjEFgSASIXzBiuvT5JgxGdcPmpb24U9Fs09DTHw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age17n64ahe3wesh8l8lj0zylf4nljdmqn28hvqns2g7hgm9mdkhlsvsjuvkxz
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwS252anlCYjBxbEM0dXZH
-            OTVTS0plYzBGRkpiKzhNSEk1S0plNXh2eVdFCnZoUWYrendEczNlalhTZ2hNMGNK
-            RkUzcURMbFZrbUo2Q3BNZ2R3K0xudkUKLS0tIGhxVjMyVVR1dXdqUWErUW5IOThN
-            R0E5WU5pT2NTaU9xTllZTU5YY1JFRDAKy/jqQIgeCQHK/iGjaxI3juJF+RdBGSgy
-            riSDUkTCBEJlJeGGY6/ZJoRO0kvR+CPU9IeO4bMF6MV3ibprCiJIBA==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1d87z3zqlv6ullnzyng8l722xzxwqr677csacf3zf3l28dau7avfs6pc7ay
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLMEo5b2p2b1hoRVR2U3J0
-            eEVqRldZbnVXb0QxTTA3YVFPVjhieW5JRFVzClRIV3Z0a2JVZ24wYTZxWDAva2xs
-            N213VHI0bGZQR3k5Z1VieUxiVnJNemsKLS0tIFkxdE5BZlVEbjF3b3JhRDB4cGJi
-            VklEVG1YUmZaOGY4NkdOQ0lQSGVmd2sKa//UtoYpBJJawl4Pio3NoguwB0WeTF3e
-            EyPhwAmirXGYs1LAn/DYFFjir4sbZLIXbiEM3B0bUOaHMguS65tOJg==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1jrh8yyq3swjru09s75s4mspu0mphh7h6z54z946raa9wx3pcdegq0x8t4h
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHM3lZQmlzVWpTVkJwMHp5
-            MmJUZ2NBaTNNUnFjUlNWd0ZIcHRkY2xKV2gwCmg3MDdOOXkvRy9mZmZaVnR0T3Fh
-            MXFFOXJwSXRhSUxQaVNDbzJ6TnRoNU0KLS0tIDdqK290TFA4dy8xZjVVeG56anN5
-            VklYMkJrMWgyOVRHQlJWeTZUSjdZVHcKOMZaqvpuLnVdw/w6V9DAzoCeecIp0SCc
-            VUSgIsNvIYh4bYzPlXRzoNatyz1IiJGcr0QVJ6OYb+ILilRtwsszNA==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1m7xhem3qll35d539f364pm6txexvnp6k0tk34d8jxu4ry3pptv7smm0k5n
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5aWNEM21ZMlJjcC9ROG9v
-            QjlnMHlKVWN2ZU5Yc0pHQlVVNlBOM000eG5zCmtpN1hwdEtseGU1bG80aW1QVVFL
-            WXAxZmFNd0d4UG93Y0xiUzZEMFc1R0EKLS0tIGMzM1hsaDBNVmpZRm5YK2VLSDdH
-            ZEo3VEhORlo5eklpdjVjdEE4OUVGM2cK8wHKskI3jqJyjT+2Kttfb2b9Rw+DQNWD
-            2tbqrvskM5qVw3zYqbHczZhvoUmZUlMyyp+T1WKQQDkV6vsajEIQEw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1dzvjjum2p240qtdt2qcxpm7pl2s5w36mh4fs3q9dhhq0uezvdqaq9vrgfy
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHb2tNRnV4M3lPUmpsNDRW
-            OVhwUHk2QXJhVTFicmZ3YVZjTHNLbTFKbWcwCmRuVjZtZ1RidEJnVDhETk42S016
-            Qncza0ZIazFteXhKclZGSm4wREZlSXMKLS0tIHRRMFFKaEZpS3VrbU1haDlXSHRG
-            YzVtN0F2NlJVeG42ckNjOEtGZ1NnWG8KDqsjbgzQcpK9nUKDckRVTjrPtw8K0gkK
-            zGNyj8yh7cUyXaizStiJy6oZoys1iujWfKEyaUd2fuDxdEEB2KnZaw==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-07-18T21:02:04Z"
-    mac: ENC[AES256_GCM,data:4nMPJydcNjhUP/26djT6TR4FryccGl8XgrRMecH7EBTPmXXQ9y5oT6winyXUVl9cuoazqtvxum5cQxsb38T1A+Ig3Jx+AbwpJMJMYDXyC0wvCBT40HTFtu9TyoiRse30DIfZbatnnnUxW4UM0GuDmOzwlW13l9BEgOijQk14RgE=,iv:OBgkB5PpP2yrpXUvRrzajppq9p6e8g/o/hsSAfd9BVU=,tag:eGk/FClnPw+lmeIjJZy7qQ==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.7.3
--- a/hosts/build02/secrets.yaml
+++ b/hosts/build02/secrets.yaml
@ -1,4 +1,3 @@
-ssh_host_ed25519_key: ENC[AES256_GCM,data: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,iv:wiGEXOQ7W5AVyKxYOwAMOZQVMHJMp59ITuIwjamPZOU=,tag:jvB3SCPdhblgXUVFy5OBWw==,type:str]
 github-r-ryantm-key: ENC[AES256_GCM,data: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,iv:Qg8SdZVOeOA1rHt/CCo1Fj9sqUvq5zhaetboYUIe2co=,tag:UNGFeWqBY46lK6/cEr4/Kg==,type:str]
 github-r-ryantm-token: ENC[AES256_GCM,data:X77cQQQDFcUe9VcHZwbhZdyg6wFsAEwRMDaDojWYyHJf4RxWwRm8Vg==,iv:/PxtdHM1eTbRZb0KrjuSSutxBVwmFaSejp62qb+/D10=,tag:K/EH8Rl6CeZcigftKO3hNw==,type:str]
 github-token-with-username: ENC[AES256_GCM,data:H1ek0++8fx4fIcxLZMe/fphuHmR3FHDGT0W+IJ4LXme0dgoD+S/uW+oLL7LEpb2lkMv5ZxGu,iv:TmWriUuA2l6L4tzMfisvtBRd5JsFgIAsSbNN7C/MExI=,tag:90L26NPokbG/xxQ37xf6Bg==,type:str]
@ -64,8 +63,8 @@ sops:
            blYxOTlvUXRIZVR1bFByOXlWRFdGbnMKX2tfgtOnWMm8g4tCPeO3/poTkncZUCoS
            MrBJuCFYJJUUwwvu/1Whyv2WNE0uenaa+fe5kade0vO8Ke2OPfxVfA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-02-24T03:59:47Z"
-    mac: ENC[AES256_GCM,data:81pv3MusFMOgEkW0yLtAbZelawD8hz1fTpFEqVJHJaA8rDfxrJe2fTWgiXXKFZfRFhn6+fEIBFhlzoMbOBpGEuIst9PSyD17hgPkCyovx/SCW5Pn0zLbeiaLC22zkE4mguyxdP6uEFbWo9ui4mJr9JjKiMmaINVAnv+Bfnike9s=,iv:Va69kM0ZRNjMADsN8Ffpzsw7dP0adCHjqchCDIpOOLI=,tag:Ua3wjeOvB4UrFp9oyrLToQ==,type:str]
+    lastmodified: "2024-06-30T03:17:22Z"
+    mac: ENC[AES256_GCM,data:oIvAffXBYfumbiZdtxPjpJ3SfqVOd2qqJq8En6k5sbFU+/y8pzl6fLvdzuF9DVHeJLgAdhdd1twpVV++9oxZMQC7BicJr6FbiWHxtQZ+jqM1Aj6XdQAtRclXvX3rm0lbHRHP7kszaQnWnsTv7uww4fPSU5XCpocuocX9ynrBDVg=,iv:WvBOUCCL7iYPA+VtBsZiQ0ryJOSaVvQvReuexjaRC7w=,tag:cnhKj5LWzg812nKw5G8n9Q==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/hosts/build03/secrets.yaml
+++ b/hosts/build03/secrets.yaml
@ -1,4 +1,3 @@
-ssh_host_ed25519_key: ENC[AES256_GCM,data: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,iv:+bSiR0HSQzSu5ZWIW7VeLERr+sWcnfx5j6O4ImQdhF8=,tag:KFQwC3giekzexvJfoU22YQ==,type:str]
 id_buildfarm: ENC[AES256_GCM,data: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,iv:RKMh8cCfoiU6AmafVtqVizfeamAkuqEU8HxTOppAitA=,tag:gJvEUhGLw+03YxpSCxaAag==,type:str]
 hydra-admin-password: ENC[AES256_GCM,data:t0vmchbXXIAzvM2nxm4j16N9W67yWRb439M=,iv:qr/OfyMvTzi6Znw446KtxE2erh3XWi2VTJvVL2Ot2UI=,tag:mS6HlE6nojkemjp4F59+wQ==,type:str]
 nur-update-github-token: ENC[AES256_GCM,data:KIZCx9IeuBHZei2V13iiyHzCedhkkGEd08mVJEc6F0DWQn1wtzC7+w==,iv:pNVRj/RR7wj64g640F7Vo4H10ijsxnrfFQnt6YHBug4=,tag:UlvOMNB5JZbuJaD9TcJ2UQ==,type:str]
@ -70,8 +69,8 @@ sops:
            WUZQSGQyQy9halJsRTIvb1FGV08zZEEKmjlYY6epTuZKRBcVyjPvJI5XKQtP5Yag
            FMrI+M6hUeyBeCade5C+Y4eGQbt57BWLmsX7u0J1WTlkUSS5j7+wPg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-06-13T05:30:48Z"
-    mac: ENC[AES256_GCM,data:c/v4ssJ57sR+DUS1tUiU334a/Ow6lTYIX6GH+N6IkXogklFsPEWrkJGCtb8me+g5amTFdgBzQopt48KOlbPzN6PgQk9nf9vv2x4i4eEL9VrJz4heI1Qc1GxnRq489dNaSTv6geGkCs+ffKOE3LFN7BhyogE865dGoVSBQDUcwMo=,iv:X7WZzdRj6Q5rekMFa7ZAKPT23/+k98/zEZTgZj6Qlp8=,tag:OvaE+aTjPGgwM6Ie1yAmvQ==,type:str]
+    lastmodified: "2024-06-30T03:18:06Z"
+    mac: ENC[AES256_GCM,data:KptKlb2a4fW8UEQ/9NzHXnqejtVixl31t439Ibr0u8/prAvXENWaFo29JmF3HIV5lpk59BS3b5BGLlKbOvBOh95Oa5f9HlS8dRjcoCrPCLsgYZAdQrRM+CozNGpn7qG6c2X1KWbaSCCStP0xM9EQzd401YaHKg3vL5FZQljVW7o=,iv:Pzpc4xVvfQLJzP3Md88H79I7APM9Z4TfYcONn4axWbg=,tag:hJhuXoScDzFsd0JLCwqV6g==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/hosts/build04/secrets.yaml
+++ b/hosts/build04/secrets.yaml
@ -1,66 +0,0 @@
-ssh_host_ed25519_key: ENC[AES256_GCM,data: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,iv:/2g3bTlzgs+SU41czsMkn/WxSjRgmK2j3ION2eh4778=,tag:NUYzuyey2QZu69T9Lo5HuA==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1r464z5e2shvnh9ekzapgghevr9wy7spd4d7pt5a89ucdk6kr6yhqzv5gkj
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4UmJ5QTExRGdZbFk1R1RQ
-            dUVVMTFVQ1ZXOHZyZjViWkZPVExjYkZvYkFBCkwydlV2NGtIOFpvNE9qeFFOSm5n
-            ZjRSZGJRWEZ1VHVxeUxYRlZpbXRkN2sKLS0tIEp4dCtRUWN0L3NzbDFjaUJjc3RL
-            N3g4V2ZaaHZYT1NFNWtzVk01aDhLSDgKm3JUuXwTo04bRp/zDNxI3j40b96p2hM7
-            VNU+LMIDFgrRxoD0dvlDmpjX7aPdT5iPjVyme0aXLZCry7Yb3CI3Lg==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age17n64ahe3wesh8l8lj0zylf4nljdmqn28hvqns2g7hgm9mdkhlsvsjuvkxz
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHem9BbWdyZVdYVDV4RDNh
-            bDJTTmIrVlJWc3hOa1dnbXpNeXQyTFdHT3dvCm1rTzF5ZGhNeUN5emdYdW1VVHl3
-            djl5Nk4rNjlaenBYa1hDK2VrTUJwR28KLS0tIHAxODFleGcxOTFJNHJuWjMrWWFF
-            RnEzUmF3VS9lcThNWmZuWFk4emJ1T28KnQyAB28gZ9VdmE/vIX11h+19FRe9FvyA
-            s3enrdTTJT5Vbs64fny5wLVAFIgEgQJc7iQkRQEHevuroZrfnZmrbQ==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1d87z3zqlv6ullnzyng8l722xzxwqr677csacf3zf3l28dau7avfs6pc7ay
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3bmtTUnZudHphVjhTaDNE
-            REpFL1h6ZS9VSzg2VC96U3hUeW5oU0tSd0c4CnBFQlloMnNVK1gzR00rZVFvL25K
-            UDZEZTJMdHdsQTBKc1kycmFLcllKd1UKLS0tIFlTcnpzKytpSC95ZGpoNzVFT0Rk
-            ekttNkF2Znhxb2ZldTJ5OHpnVTdPZ0UKwAp8eOe4pzxsjW1yJ+al+kG07Sm355Jw
-            eqAX2UDKDoQV0SQ0hD9XJDEk8cSHCtf4lwOevGwbYTAM4HaunIWL2A==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1jrh8yyq3swjru09s75s4mspu0mphh7h6z54z946raa9wx3pcdegq0x8t4h
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTN3g4b0lLc05ZaFJsU01G
-            NnRtekFtOVZZbjl6ZHhzUWt2Rk1LMGxYeVJJCktNaHF3NllFSXBrZWh3Qks0MHo1
-            SVNNek8rWmRERnJMRmxhalFSWkYzRVEKLS0tIExSSU5RQ1VjYUtya2JtTW1MTmxm
-            c3FUM2JSUUpnTm8wOFdPaUFETlJmNUUK20ynbZiD0ffRvyUQNW8RS71kJF/egGiV
-            bi8qzgaMTqrVz/sIWBkBDLfmTk+lD3EUe0Xs1tavMrAUMpWf8uT1DA==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1m7xhem3qll35d539f364pm6txexvnp6k0tk34d8jxu4ry3pptv7smm0k5n
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiajZNNFdZNVRGeElJek5L
-            TzBwUTd6bGxpTm5Ma21IaURnYnY3QStrT21BClhydjlHNCtGc0huQzliQkU1ZGg4
-            YUI1VGQ1VXk0V3ppeXMxbStPWFZZdWsKLS0tIGxJdWtEQll5OTMxZWVFTjZYUE1v
-            ZWI1MVFDQmphM1FrVllRb0l3aXNsOHMKy2hiGzftSLh6BJ8z2mZO8Y18KDRPtXFn
-            ShwktxT0ALEl8PzJifNrfvpEgTF3IENG2Js9Jn68gNiHn2h9BpcKUg==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1dzvjjum2p240qtdt2qcxpm7pl2s5w36mh4fs3q9dhhq0uezvdqaq9vrgfy
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxcm13Y1JlQWtVTlk2K2tY
-            RHF0L2QzN04rR2Q4UlVQR2graGVIbjVOdkhzCnNHY2NQNHdiQWhmeUZmZi9XVlFU
-            azhtT0FzWHZ3Tm9NVWoyTGRWbzdtdTQKLS0tICtNY2Uxdm9UUWpyeDJxQktzQnBj
-            NmhkR1AyZlYrZDdKSXh3bG4vZzA5Q0UKJ4m9ePc/9D5WS5Td49ZJId+uQdguqOup
-            U4hsH7PRo68Axqh/OFGpOGP676160CYbkgz8bCH3lLlEsfJWO2Pcbw==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-04-24T22:00:21Z"
-    mac: ENC[AES256_GCM,data:wYHcsuy8NNABlkPoHalvV8sbbeC0R5Vztp0sCAbPF3rRzoaJp3HN7Ax27xupC1M0wVXgp3VGghxm3RTZG5K8wFoiaziemFeEgDZ0uavW1rqYUMH7gDYoCH6isLOKiqYqIgd3CI1EWqp1OwatHmab2GRDqOeWJEpjJUMGFbo/giI=,iv:7TZEAjTqXMbnLh4nonpJM+DsJ71IkMcoUUjDhZHz5DU=,tag:1un9KAPXupORhfrgoiw8Fw==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.7.3
--- a/hosts/web02/secrets.yaml
+++ b/hosts/web02/secrets.yaml
@ -1,4 +1,3 @@
-ssh_host_ed25519_key: ENC[AES256_GCM,data:mp33XErF8FL7/rxKUsXiVijkCcDlSmtopkxTA/tDpcVx1ft6e9/YIoGYvLwxMhwowlEjktuANnZXo0tPHoCaiRdsFL2XMlNhbMHz5PKdIwpQyGysbqJKzVSa81F8RS1IG0sY8YGaCXsOfWPBbNJFTapT+9Xb6niRwiQkwwPAxBN9zdS+nMvllNHEZSv4RQ84uKzvyaLPB9N3GU7GHPq5UzBYNO1eH0eHoDEvv3JI6W/C8dws4liAwCSoCOF0RTdBpVKZvlf2DMYCKEZYWlnyBvq/NVJr2JujNDhtKOozL0tVLCkh8QQrLiWucN1yCMiy+1VS5yqmvqa6Gvc4P9hgmMHRjA37oJtDrik4SWQZq0VfxJ00oC3ByGmH6mR4AZY/BTPMnRAgF/m3rjryEd4hCjlQ1jJhdWmRTchruK7oSz/FrZmtCp/fVsRulcJ2JmU2gEQF0rfP9+eq/LWLD0FPvsp9ytf18wPMAY6fYj7vQGj5dx9ZB6oJ0RxlgAhPFhjAztjmMQD43oSsNnm9FKISS5Vv07tQDQBUHe3d,iv:Z6SfUFsjfRaVc23CNM1NE4/c92MLmbdEXilPJomX9qM=,tag:xknd9rqBVvUg69ICvhXHcA==,type:str]
 nix-community-matrix-bot-token: ENC[AES256_GCM,data:p9sQnsEIJEGi6AYLxemCN/zkf+lx6dEjrIVfFD28DWtOvCxIy7QKImWIMsbOjWHW/0sjHQYoGwDBrrBzpYed3+AK38J+WEnCi6MSGQ==,iv:BdV3bMjuXFLFTvcXLL/2l08qonIXHFtUvpj2QM0n3Ws=,tag:EhCwGinqZZuLa5CIpCaKeA==,type:str]
 nginx-basic-auth-file: ENC[AES256_GCM,data:andS+j0bOp4m7Xty1RuAmyNGz36rUChhl4dtY+mvguHzei2lYDfdZWilx2VUFT5mmsWCeyrT5otVVg==,iv:BuawT6dsaI6s/vXbfG2HijUBzHec2D47w8KRj6Bba2Y=,tag:PjkfdKhjWmP6+NKFGEPijg==,type:str]
 nginx-basic-auth-password: ENC[AES256_GCM,data:ne6h4KoBo7dNkrKhe4thFkgE/EmIOkfzDh0Bag==,iv:ZsHANsb6PI4a84K81fM1PHtPPa0mi8nYLfh1A9CbaqY=,tag:IYQyFasarwh/EPZ3iUNX3Q==,type:str]
@ -62,8 +61,8 @@ sops:
            QnJZZzN1a1M5b1dwa3hvL3ZHYkpxQUkK1g9sQB0UHl9coaznjIn4WDpQv21Y8cl9
            LNqnv0Q6KrxNliq2JEJoEpjD5+xTcqV/5FgylKhtdNWUZ0eAX8taog==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-03-22T03:41:05Z"
-    mac: ENC[AES256_GCM,data:erV1yKaQjgaJieSFF5B7whTa8E/cP9Fzn9J5cIHRK7lXFKeiT9EmjWE8Iz8aCvbcxjxQNFMbFOAUBZJxR0zSQFY2VwRkxSV5zbwDDr0iRdFJcyggO84bYWIC6223S5tINHlgyYJ0UNAfQqkytKkXdQElicbQAi7MG9j2UNEasNM=,iv:P+H+pCaW6vlUpiKcBSoyf+f29qY6T+dunIcmEK8Zs/E=,tag:7AkgXgy9GY1NecJxG05Q4g==,type:str]
+    lastmodified: "2024-06-30T03:19:37Z"
+    mac: ENC[AES256_GCM,data:TScUSdUv+SEG2MJ5MdCP7/zuCDG857erbLYG1Vp3/4d3Pvq//Jp5nVtnFSw9Y63Do/r1gzfmiU/B4HFbn40hVo7+/KjKOl8wb9qUheh2UaW+m+gd05mDjjQvrnTVjJJ8/Rj4/kFYvYzsPag8KY37CG0dBqiE7esyk9hUf7kv/4w=,iv:gCsM4oGq0zAR1r0E5xeKAGezXSyh9Eqho/rsU+3x3E8=,tag:A/0KP15zdJUpS3fc9z6/0A==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/secrets.yaml
+++ b/secrets.yaml
@ -7,6 +7,12 @@ accounts:
      totpsecret: ENC[AES256_GCM,data:75Til5U49fkBCYxzqDa33w==,iv:rataIY24/u0ldHid4PnfJyh1E6P8U9OUYszsk/tfMw4=,tag:dWeqIxcO7ASnAZiVbKLiLw==,type:str]
    - name: ENC[AES256_GCM,data:BGA/HMgie64=,iv:c+utmChiZA73GRS4uzZDyfdU+DZaDpB3WljC2uye8o0=,tag:lr1w5TWr05lpfBNLK0Swxw==,type:str]
      totpsecret: ENC[AES256_GCM,data:Q5aJq9sLmW/0oMIgy4FErA==,iv:cFhVj/QV4tMjvB/Y8ExOSSLArvjxCV8+39YtMaADK04=,tag:aPJFH7WhaBYAW7eYsGzGYg==,type:str]
+ssh_host_ed25519_key:
+    build01: ENC[AES256_GCM,data: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,iv:ksSPKFNHdy646BU2x0fr6ey+kif1jpPhlsQ5Kmxjqd4=,tag:2SL/1x4/9LoNqfHPMk8H8Q==,type:str]
+    build02: ENC[AES256_GCM,data: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,iv:cQERNZJUQ0TJW0pbEzJF6O+1Idkt2e+I06+Kjygr4lk=,tag:2X4KhuEd/0153sCT7qeyqQ==,type:str]
+    build03: ENC[AES256_GCM,data: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,iv:VRAoe3bRpEBDGDAX/dZM+TOM8I6K2oxb1d3Ld+BQKuE=,tag:CIndzn8DJdxJLuFMtpk8Ww==,type:str]
+    build04: ENC[AES256_GCM,data:e8qLPiTruUq1OSgfR6KQ/zXMeLeTapH8k9viglYdz0mjG198oKPc2JNgLsuL8vFBafJ9P0SHJlKH6wQNApPNgEaktfTpx11WlK5oEa9J/Bw3OuFUJnyRE3UzxvWNzj5BVIk6pQBDhc2rOucAbiWwTJu76Wxopd5PQ5GVyEK2OIYaZ2rG2ZlF9RbfZgfiq0HBkZhPfL4osUMGmFRsa6p18xH4wm+Ey08n5DG27AxGf7yjKiXswlZfzgxX3ukqsNw5pw3GNHRLjlsJsprTMVj+hgS5N3PeY+IViJKHE0VmEU3pJzlFSAk05mTrYzJ0jHlfQTbWHs6wYkc3EbKXG83zcviowGMK78P8Qpy0h9/3+r1I55/3UAd4JKnGbz+ADTMwowgNeZO/Vv0LQN3zspyfmYiQ3sD55kdGLWVnWFXZ1m0x+3D+CK7KaH7hqoT0GY2rYFwvM5fXKy7ekrGtpUyZPy8iQw6Vxl0+bcKgU6IcWYikZ32XvR4bjY9uDBvuS+Kk1e7y9WTy2h0p5fw7T2aWE/rw9m5TuUnn13gRHo1KRfNApzQckc5NbXG+VhMrQ9y1,iv:to8K9ljpumnRFz7lmxi0C6JT6xME3Sukh2jWRYkZlPg=,tag:puIarMsuxMidHOJ18ZO2mQ==,type:str]
+    web02: ENC[AES256_GCM,data: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,iv:qcewvFVbCppM0063eAVE2qkl348X3Pocm3dd+H/9Hko=,tag:QlXb7KkWV6tztq6kAbIhlw==,type:str]
 darwin01:
    customer: ENC[AES256_GCM,data:zDa+TUczDkjxthze,iv:VdYAf5EP6RjRLkWQzWRRlkWiUKSfoFR8f2GTMMTZg3Q=,tag:8CZSA1qxxOBxbPdzqU4NFg==,type:str]
 darwin02:
@ -106,8 +112,8 @@ sops:
            MkcvL1JyVFBJV0Y5RFFCMGN1OUFXdU0Kdx1wy6ZOOTg1a6VKaq52SMBvC26lMsW/
            oMP+hmXc2WtoqZp+jZ9rrXz6cZW6/dO7CPqxl3aUEKg6BkXIwgyKeg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-05-15T12:29:44Z"
-    mac: ENC[AES256_GCM,data:W9P1IXlwa+u/ydmS2C6tSKR9kt1kxUiVc9BaYYcwrWmghZGuNNBnKJ0RrUuKMaoHbRW4iPV6Xp35QkYPXiAsi0aVm5A7cNShqeYbUFkieAOXMPpcqPBYkgFZjPcOAvthKwZKUZ2Dy6dfMLyDtUlenYvz/5RqPtpfSoCqo1R2lmA=,iv:7yljRIN/N2NUXy75QqrE4PkEwAehskCxHCKo+At8tYE=,tag:yNLa6zUrIWYIM9cpKITU4A==,type:str]
+    lastmodified: "2024-06-30T03:24:53Z"
+    mac: ENC[AES256_GCM,data:xgdZ5C8rKGs8pzZu/JTAb7retiWaPC5+TSGSHC3VoJGjyaZWXYZOScRMmWTuhWcHvQzpOIWXCvj2v9bgVMNBzCc6aevIzvksKwgp+r6LAU0WW6gJEeJfl7+7jyEE/0WJA3pN9vKJqoUSsgHI/tgjn2pvTL9wPZgl5t1cf2KU3/g=,iv:RGluZNlFItQGlz1p0Fout1qnU9ZIVOdNtMkREftLQUw=,tag:KJ4jCJCEtb2eho+83dfIbA==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/tasks.py
+++ b/tasks.py
@ -162,9 +162,9 @@ def decrypt_host_key(flake_attr: str, tmpdir: str) -> None:
            [
                "sops",
                "--extract",
-                '["ssh_host_ed25519_key"]',
+                f'["ssh_host_ed25519_key"]["{flake_attr}"]',
                "--decrypt",
-                f"{ROOT}/hosts/{flake_attr}/secrets.yaml",
+                f"{ROOT}/secrets.yaml",
            ],
            check=True,
            stdout=fh,