From b0e39c2d36ced2254c7c35a8b8306fec722606e3 Mon Sep 17 00:00:00 2001
From: cy <hi@cything.io>
Date: Mon, 16 Dec 2024 20:16:08 -0500
Subject: [PATCH] more yt secrets

---
 .sops.yaml                   |  3 +--
 secrets/restic/yt-azure.yaml | 22 ++++++++++++++++++++++
 secrets/wireguard/yt.yaml    | 22 ++++++++++++++++++++++
 3 files changed, 45 insertions(+), 2 deletions(-)
 create mode 100644 secrets/restic/yt-azure.yaml
 create mode 100644 secrets/wireguard/yt.yaml

diff --git a/.sops.yaml b/.sops.yaml
index c50cb04..bdfa9c2 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -15,10 +15,9 @@ creation_rules:
       - age:
         - *chunk
         - *yt
-  - path_regex: secrets/restic/*.yaml
+  - path_regex: secrets/restic/yt-azure.yaml
     key_groups:
       - age:
-        # only yt uses restic
         - *yt
   - path_regex: secrets/borg/yt-rsyncnet.yaml
     key_groups:
diff --git a/secrets/restic/yt-azure.yaml b/secrets/restic/yt-azure.yaml
new file mode 100644
index 0000000..ba7fc85
--- /dev/null
+++ b/secrets/restic/yt-azure.yaml
@@ -0,0 +1,22 @@
+restic: ENC[AES256_GCM,data:ve8425OEixiEDAW9Ag==,iv:BcD+ohQRIbqqxxMyisGX6w5d/H668iHYd3hMFkS3MGA=,tag:Ig4R8TVFM2/LKik/yPNY3w==,type:str]
+azure: ENC[AES256_GCM,data:zcAeDgtNEffH/sPNfYfT/9xZuIn61maVUNA/PNIYE5nY159gIOmJFR8R6zaJT5Ij3mxx5KUCeChjMbDtb/ZnYbKeiaNRd9Xw1zVOuuBZAbONhCU5iksUGLzJzJk0j3j9MnRTIwl7903m/052DvbzFcFdCaKvKZn7KRH2sggGjqQ+1UxSb/yez/QtF2I0duMBvC4SKI1Gr6GXoV+sYDckpGKj5mdnxMu+rZsIFFICtFvpmIObk0l36Zc=,iv:XRcNGGEX81KC0+EIoFqBnMIMMvi7yJmSpZjeCG8TutU=,tag:rBq1SLuZrys8kxJqWcjoyQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1sy0at69err83qyml2vqu8xvwjccfws447aaadfvacj2qluw3p45s2mtrw8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCWFZ4dEFyRVhlMnNHampS
+            eTJUcTlVWWRVNG8vSjIvaTkzTzBLWGVmT3lBCmhONUhjZFMySEMyY1VXeGJwRVJq
+            bVlNcUF6ejBTK3Z4WEhXenlvY3plSVEKLS0tIFMxUitCZC90d1NOTzFLd3pic2I4
+            MkhJUGxHRTBnZVFFbG1najJFZno1YVkK+R5gpmJ7Tx/tdFRvg9TIa0yIwAqT8Sah
+            ib5ORCby6GwhW2J2r2b9qCd1827zQH/2hngk4D7Y7x7ys1yifrIKww==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-12-17T01:09:43Z"
+    mac: ENC[AES256_GCM,data:DNBezHHAQtRkpZ8870C6qfICTf9Ehw3I7IB16G/dbmXqi0IRmhGfcAHB3iDQhcqNemyPM4fbc4x0zw6/mGlJYEy1dd1v9X/qc3AzTvh6gEKUuKWm30tt7/G/02k+zyzwRCN7w7J7y1jqeSVZaQC2EjI2noHOLr1phMkwRQuAhu0=,iv:gakZYnxilXtRqWR+hyNP+VsUFybfvxg44Ey+afMg0Hs=,tag:0vgloDNEj6msJE2yQ7O0Vw==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.2
diff --git a/secrets/wireguard/yt.yaml b/secrets/wireguard/yt.yaml
new file mode 100644
index 0000000..c5f6b44
--- /dev/null
+++ b/secrets/wireguard/yt.yaml
@@ -0,0 +1,22 @@
+private: ENC[AES256_GCM,data:LOC8vGmfyLomE/5izQDE6N1rFlAzIypw5wIPc264DCcmMR3b0e2Ng5zh1F4=,iv:MImAKrEkoSghfj6uaI+TqPKmLn+XaqinNFWwSyEPFrA=,tag:VMDRGslWmmrLj5fwPJe6Mg==,type:str]
+psk: ENC[AES256_GCM,data:D7sbcGvTyGEOfevUbxfLzaxQ/1e+n14ZIt3xdIiR1ZCM2ZPCVstAERQB5+Q=,iv:m1N9ZgU0LIV1DwuLSW80Re3e7EEzn1rMFFzOoKzH4ao=,tag:pQdd7U+ZzteLGfYzgSrKiQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1sy0at69err83qyml2vqu8xvwjccfws447aaadfvacj2qluw3p45s2mtrw8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3RW5aazBWNmwycnIvbjc1
+            a2tMbnF6R295bGdWT0hhYmx4aVhFWkllNmlRCkpjVFFXZW85QlA2ZTdRaWlud2xk
+            ZmorZjVwNm9ndHZpMXduWDh4QTNVdFEKLS0tIGpPdnZCSFRyMGFzcVZyaFZ3Q3U4
+            aFFObDErQ1V0bzFRQW1TdFpTUUYvS0UKxyQ4KxEp+cHwq7eDAFSZVOofuZJ+8R3U
+            QQCMK/Q7px33KvIBaxI3dGTtaO3PdJ13p7Xp+Vj8ftKcC1xr1yuObA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-12-17T01:13:00Z"
+    mac: ENC[AES256_GCM,data:7hWz/cPZLsPrax74EJe0pQCVhXrPTdzAJUOWmBk/Nm/hG52EjWSTKHJdA7mq2L3OAd/3NwJLw9EXIopR53O+/VsUH99DKtRGl9MV4zsZkEpFA04V3er66pjGgVNcS2jChrc95IggBXRybDXCy6yfqU1HqSSoO1jPM75sWYGcd3Y=,iv:kUsypdUupCRAdM1vGjtz/s0MVrsimxLAeUdm33GuMHI=,tag:f1cIFPiFhyj3EE+DOevntQ==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.2