rotate keys for adb

dd-ix · Dec 4, 2023 · ccf6e05 · ccf6e05
1 parent fa9f52a
commit ccf6e05
Show file tree

Hide file tree

Showing 2 changed files with 68 additions and 45 deletions.
diff --git a/.sops.yaml b/.sops.yaml
@@ -2,6 +2,7 @@ keys:
   - &admin_tassilo 91EBE87016391323642A6803B966009D57E69CC6
   - &admin_melody 778755C4893709525F6E62BCC2A819CA37DE8B61
   - &admin_fiasko BCD42664340540E058422472AF9E0821C4A08B44
+  - &admin_adb 6F9E5DCB111D958035A7B0084653A66E940BBA1A
 
   # test key
   - &test age1925katzy5gws3f9hnvnlwspu6trxf488arwt6ayw3urg2mgumqhszxnmqh
@@ -13,6 +14,7 @@ creation_rules:
         - *admin_tassilo
         - *admin_melody
         - *admin_fiasko
+        - *admin_adb
         age:
         - *mno001
 
diff --git a/secrets/management/secrets.yaml b/secrets/management/secrets.yaml
@@ -21,66 +21,87 @@ sops:
         - recipient: age1h5zuv4pxjv94gpmjgfahkzmd6c5hfcdmk48vegzagze24a8x6p3q2muxh0
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKRktRY2hzWHBwL1dIZ1Ja
-            UnM4aUxONUpXUDMzVXdzSVhNY0dlK0E2NzBVCkZqa3VTL0NvMVF4MFU0OWQvRXFK
-            WTMzSW0vUS9xTzJRTjAwVTF6L0JZck0KLS0tIHFmMHRyTUloM0plSEh3NjZka2F0
-            L3hVTzRXL0FGQXlyK1daM1lzcEVTNXcKRTHXWIAuA8xfwpGQhrdUviy95WSihYIu
-            BaS93eSe6McWPQfoV58q9mkfUXUPo5HYLf5lVbeTwuJJce0T9E0FMA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvaTNqVmpRMUVJdzBOMWlX
+            VEdDZFJZNy9ZVjRSa3dWZ2NGYWw1Uzl4Q0RBCjQzTW5XVTdZQ2l4a0ViNlR5eWU1
+            ZVI5OWZkcWtDL1ZFdG0vZVNndjlHSFEKLS0tIE8vZTg5RkV3d2lvbWIzZDNCRmg4
+            OGxadGFhalNCNk9pYlpSV1ZnSjlUeDQKPeg4pTO/5BFrBp9WuteMqprbypjMaoCl
+            2AkIoVWEuA3mIzGFTkzwkMmnwiuWrVLGVWH5ZsU/HxMG0D5Z8ye98g==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2023-10-18T14:56:31Z"
     mac: ENC[AES256_GCM,data:9gBFeFPTb5ZYF3m7DgQRIS0YqSq0hDlK4fhN40ByUBFT509u8FKnpo3B1YwbYyNrlNvHKa4eozdkMni6Zi7vKsTvALBAdflgC0snXmK15E0jXJb4UYyQewagLtcQnxEanDFbi/rgCmxGHZWW7ooYx009JFsoh7EWUp1jTTyFja4=,iv:FyG+A2kniJM7zkTHyoHyUPVIibHNymtHSm6rNoomVgY=,tag:0H98bDEOUKdGMHHdK/yZ+Q==,type:str]
     pgp:
-        - created_at: "2023-08-30T21:31:51Z"
-          enc: |
+        - created_at: "2023-12-04T18:54:22Z"
+          enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA/YLzOYaRIJJARAAgnUzfSDRcjPWU9Q4hhHxER4TqAJy3fDShTzNMRKl5ugb
-            oesw3TKSNvUvVLZI601JmKd5XkCPRKEoJ90DLfzuXVQe6MmJn8ib+oY6TZvthM1c
-            Gr3LcC6AnFOpk05Vd9cordruopuB9qedJimVETGoDKq8u3tnNmkGqglXyABO+OHo
-            WGGBcpnSZrMnyTonot5DeSoXoe+dJL85heRnZHbO6Z8axhXlWjQHQY1xREJnESAz
-            lhGh1nEmcZIWVnjKnW1w6+HnRF4xZQZsnoazuiBk+d2nkqDmMjz2SsPbwsfFWGXg
-            ag0sdAaukqcCe0KwAkaRIpDQ6gYJwqvDNmvn9C+hAVq6VNEOhse+Vrxg56bM+95k
-            ud9/iG6tRAw2V9e7ekN/RmPrx3tXYAoed1dcLcC/QF41oKfCy8It8X9j4euxxRku
-            TO0caI6+coF/gXa/BDHTektrJKZXEsZUSTScGQ6iDCOMMvEZSuavYZa8eZL7FtxC
-            66PnwepsQ/fu7K76UXQ0Oo8vOsrU9wAuDMy1d+iMyNASbE2Ejhi19LTGkWXew3xg
-            Egh8m+uwH2ekDsBcSeOct1OSAuj7hB0/XOjyPdOn3dEpCU5Et0w7c320ycdJi0f8
-            Zo5iT7+KNMeQkY2tAnMbMjeTLObzSyDNW8prR7zhB9fftneiHP2x+3svgCMh15fS
-            XgEPMk/Jbkj9F8uxEhKmLAzoRyvGAZz/8wQclozH4HQmCrRZfpKDq/S2z9iE8ylj
-            9TW3anSk1ydHOcuPZTIpdh7qxSya7NkhjzzMteR8wsYGBnOGCWMzRFzTamwACCM=
-            =cMiU
+            hQIMA/YLzOYaRIJJARAAy7dv1IHSUyWxn/D1Yobk+yQy6xYTyAIWuuRi9GEGGOR8
+            lM/sFRZlq7O36qqmrSmyDGmOkNxkBz8uf5/xPa+ZLpBbs+xgdBg3cR3XVC46DJW9
+            6oq0axqr29QcvWjbhb2g70DCe0DFAsoxhFeMryvDj5saAzQHlM2qvPEdqrtE9Ru5
+            jj1Vcm9U8kFuKJGWeQNCsux3hPQSroH0359TcyTYSWAeD2zAqBM5vBU7yvTHF02M
+            zFP9KaaGB6kCCmF15ro1CHf4qaRIKjyTYjqxSSELguQM4KS0fE4584KnrTrYTOUv
+            RevojEDazg91GXwTmib8TYTgRawlQ8/sJMaoCau/zKsRwnYvdBCC0td8rDxsllYX
+            WGHsnb1KUa6C7y+tBoWXfDA9VUqHHd8lvDIAbEdzvQz3Wicht7mt0bIpb0qzp6Qa
+            QK4twRUdY+hXKigWaq9JIRFDEcAu/rgwKLwkfWhXQLr+4ZLq8kSEGX6eyTEeLCYU
+            CT3Y0lc47CGCxF4p14I6JDlQA5qkHsIpwI2sgpB4x92e2murICkwB0wRiMVtbBLd
+            vcSDh6HwfJ9+zhRZ3Gftee8bheDfvGq+uLDtwL8P5ksAcSeQtrGPIyqmxUa9TvCB
+            KY/SWNxjieDAaTLA96DZqjnxuAiN9uVajVMQks2nLFDczsFjEPOWWRolGAFfFn/S
+            XgHfqnAkHwLOawHYjZqd7p+g8bRqcm03yIecKqsnNvLV4o9gaTFqaR2IlLn8ARyG
+            wjulZcdfWVlsSPJ0c+GmYdbrVDBj9QHA9ulm8SjnhfjWVJfihEQdcwUJeV8spEQ=
+            =kfzc
             -----END PGP MESSAGE-----
           fp: 91EBE87016391323642A6803B966009D57E69CC6
-        - created_at: "2023-08-30T21:31:51Z"
-          enc: |
+        - created_at: "2023-12-04T18:54:22Z"
+          enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hF4DscBX0xwMSCMSAQdACHC6QPM6raKuaS+2G3xeu6Jdkgr0ni9Unk2e4RaSZgcw
-            AzHlud5vxNUb/t4p9PDY0w9bHxMQ/Xfm4pqDywdqwJHzl01LeFWI/jlmndAXxfXI
-            1GgBCQIQJYu6IFY3vOuxn8OSpsmU6XRPteROWe00tvPcbSstkMARdt4HZatTiruS
-            5OaQeuZtKCPY674VooX2V3lNs7ulfZUCEitM43SP6HBqGRlivNHSugDWLbiWckYu
-            XbDSdz/XiV7Lqg==
-            =I//s
+            hF4DscBX0xwMSCMSAQdA63iaJQYVrjHVkSPFupDdXba5sTZ3rmKwyoBVD5Zx6gEw
+            ZfbpbMxcdtMK7yUaa8mMeVxWjc7z4zpddXs2rRbuf5dg8j2LxEfwKPR9p1zGAUbO
+            1GgBCQIQEZx/geqm7Hox8HoKUwaFQQfeVx+D4Dk7Dx+/DUMhrjHn7YrH1kGXpJ59
+            sY8Qd5vOSSfmq6AsGw93GcRoI2Cq0boJgQXkjIcRL54iaAJsNmwpB1lYaqFMFR5u
+            tzq1cBZgI8vnLw==
+            =+ZOQ
             -----END PGP MESSAGE-----
           fp: 778755C4893709525F6E62BCC2A819CA37DE8B61
-        - created_at: "2023-08-30T21:31:51Z"
-          enc: |
+        - created_at: "2023-12-04T18:54:22Z"
+          enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA+0g9G1sLfsXAQ/9Eo5U+a+J0j7q6qe79x1zMrYJnHDQpwGTseUW9z84j96j
-            oxkeR0su9ViDWuecoTRnTGuXvLF0EXNEQChdggk87yCGATSEHFQjtpW9aQmfZ1u1
-            aoRiKUcb7u6L4jJrcFrp291ZdBQ1tm+M4i2qeXCftVODn15ooT8WeauHEbozulDb
-            EGsK+8YroCrKeseeJ4bi8u0zsnmIXUoR7zWnbQi0aCzlAFUYwCAQJstdVER/iENj
-            xik1ETal4MQ4hFsOCfHwhA0wPmOTg85XskYtkYWouwMBxGIn5egvxUVFXORZ6Dt/
-            ZsbYrABYQtF+A+egq4vcWtnpeco7k6DZgcF31kOqLSpaEniF1CRe+BeTnJpMnnt9
-            7DUoX2O+FEqfDVaKIPoKC6pXIU3VzEt/WKJREqxfMYDN9NEQAbS0PpRaInNz1evJ
-            z9yiK0pNPEXmO0W1llgVToiRZLmzk5F55UmAE0BwUoY2N5+LZNLrvkCydT3lRvwv
-            Oi2UndSXQRWDcEyH/H0TTTL9KKxE7oyVW1kdKLjA0B79O8MxvmwDZ7xYXpn5aoTL
-            nvtITuXFvJCVJ7trKydE9INRB0WDMxLrJgpUPm866QIXmK56WxuuH8O/YPIW96op
-            ArFM0VjaCR/BtSBKltaStJxJiVdi0RrnEGPRd0FtYsCFNgb9OjWsBwWVtsClChvS
-            XgHpR8qCuG2utmmeDVk23VZCAPoVhZl4MmSmIC5RTmMBGRk/e0/EuvtW7UDUHO1n
-            9xFVacXQpF8kldU6gQFKsWL5y5AVa+xxq+iMoaZljWAvuxZwRzbWsWv31PAijLw=
-            =5KFm
+            hQIMA+0g9G1sLfsXAQ/+JYi0FO7Om1ipFHn3g/e1JSLMBUu7x17Pf2qKJJBW5xNM
+            TxVi+CklBe0Bpef8G4ReMFdG/bD+AKxgeFV8vUjvWBnFQnPub6yrP/+t80865R/9
+            /G+j3oRnh0RS6w387o27NnBo/6zcvjDhMhWyw49Pi5JHAJQym/iEQgF+SaMyZLHG
+            giNYZFFmrttoiipc+rLp24vl+kVCnkn80IG8xXvOh0b2qf7eJNzmOZTCnCIQJ7B4
+            z1hH5EBW3tvCxSzHPwWMlGb/icbISynLbjyIdzWWzxyRj92qZnWmnFeUQZ0yP3gg
+            3tADVeiQeJP2A6KHG+fnpH82+JiN0sJ0f7Xq5t5GYdHfV+p8ieH2Q6Khuu0Zjm5S
+            IMw0vVnge5J0qn/XgTr87RmWNm7FO+K/sex4ugumVW/dRqzZ5HxOWgYW/YvAL4qt
+            mZ/nYTidWWB3Sc6BtEaNdoUWfyuzIV0fulr+/6ChSclMUggJqECz7eXInQpY4Sog
+            mquvmE10BDcSybSauYLJw9LDfibW+9kPan/iV6mDvOxlm7xWbgpdkP6uK3TkNHBp
+            4PYyzILa+JqXi+0jGaXPKfmaBSRiUrunKdrHkdCMKjmEJt/n8ZjcDZCA/IVnGHRA
+            rXf3XN0VwOsqyoSdErzpm41+kut4WVguowsD1c9eaapgTW3Nhq8PzLa0cRNElVvS
+            XgGgTvHmNg2Mg1yFRf7VU0Asz4vJRLWVzXAgUbBdKbv+m7snjRyYr0fPU2SCrQzq
+            d+pX3TzpihkRBCProX7RBW0hUBb4XUZilI3oGFl9E3twFCKVe21Y1Mv1qn18zrM=
+            =EtOR
             -----END PGP MESSAGE-----
           fp: BCD42664340540E058422472AF9E0821C4A08B44
+        - created_at: "2023-12-04T18:54:22Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA0jS2B1+GdbtAQ//dZEGd6qe9ZL3YLwAbBimHdWbYZ5gaVeLicU41jfH0rOD
+            j+6BSWF2N9pflGNKk3EFCjxwp3Bb6zOiGP3uuN/faCj/1DV6YIxmS+46R88L7o/N
+            v5PupF7v221r2yH9ISKg/D2fHfznxKPgYF7F6uBiG+gTi/h2wGLxI8ReGHI34xQ6
+            my7XZVRqpFtYJxDOx4Ss/CA49WZaTEu15IC2c5KBGjkhuxhvFChC5azkYTZskLQG
+            pSaHlgt2QiouUu/Px/+vc8XBMKLxVHfbOXvdBmFOI/DNXavLfVSDPrlFetqvH2zm
+            EI00/CIGGlq9WxMxyjeI34rgzbfTOknWftyMSaJdLe/r9uY2L+tfoPg/Of/Tpp20
+            B1lro/F4ujKjINe+3coELx+tmWaSvaaw0n2ixrbJqRVKn2HlHNsF526rZPcYxdNa
+            MgGGaZI34DFpR5vgjYx+Dwa+MtvLmoZ9P1ix0NAFtzwn/4TsjjnGrOcGt0o5rlms
+            c4rbui0bCUbiAav9tHk+Ze/ynw3BF3IOujHidEMUNKIs0L3cbXi5tYM4jfQc/GLu
+            im3BQ3J1Noz9L1AXuOrEbmM4TGMm36fpdGggIKWslrau6ZyOYvL0fQNA6XyvhYlf
+            /PJweQnfs3eER0IHCTK6jtdqutkqcJ2OUCsPzoq8OPYWoChQzGZNydR6j0LmiEnU
+            aAEJAhDxYN58Tnu/EJvw4qS71wkoNeUjX9IBkjNRGrW2SML6v2dfjmlpeQ5s+g5A
+            e3M8F0XCtPkcEK8Z1qMlbBfHW2mfSbYEbe8lBGEDcFRauDSLacrj63CGpxlO52Kv
+            KzG++yyme8pF
+            =I84F
+            -----END PGP MESSAGE-----
+          fp: 6F9E5DCB111D958035A7B0084653A66E940BBA1A
     unencrypted_suffix: _unencrypted
     version: 3.8.0