modules: fix garnix sops not decrypting keys

stepbrobd · Jan 1, 2025 · 346e35c · 346e35c
1 parent e54579e
commit 346e35c
Show file tree

Hide file tree

Showing 3 changed files with 61 additions and 41 deletions.
diff --git a/.sops.yaml b/.sops.yaml
@@ -3,7 +3,7 @@ keys:
     - &framework age102w4y6gsntvw93n590agqdg9v3tt8rs0x2kpunvu39jh6lyvdpeq7ct844
     - &macbook age1cfd003wlk8w2hhtlwflyuc6lzwsswc48kpl9cafrg4kc5jp3u5rqckcf5l
     - &bachtel age1z9ka8nm4v5rrgxr72n3mmxdtlq4l468rhn7sn57kj2qtd96rff8qqqlzap
-    - &halti age1rv2srjksxsqc5kgyvq8axr9pwvsg3m8d07q379ntxjqz2s2gu5pssts9h9
+    - &halti age1lchn0h0a63g7k9zl76f7nuylp5cl9ak2f6ucy87q0gyk8qa8negst87jle
     - &lagern age1erlqclg0xwmyxj339akx2xeaq3crapxcd2qr7z2hjy5q8v59aqfq2qx3tu
     - &odake age16urcveanputmn5vrt579xnk2pk87mlv0d2fmwzn2059qtzklmq9smj34a5
     - &walberla age1s3syz6jhdj9qqz4lcu42uxckpn8na56qa3sehuy6cpwtypf3349qkjry6v

diff --git a/lib/secrets.yaml b/lib/secrets.yaml
@@ -1,12 +1,12 @@
-acme: ENC[AES256_GCM,data:VpfruCis8oICasUrdVmMg7beL6TpjV6IQBXU0ufOosfPCfcoWepnOLTBFlRJmVdqyZvMOCs+KYdmBFPZmUWK7UQ=,iv:K2uF1hSGQqhd295xag+BeCravBKetnMc5r8Nd3RAIk4=,tag:PazclmjVobVII29nNqRFlQ==,type:str]
-attic: ENC[AES256_GCM,data:kW0QuN/CyhSBMyreV3vCk8LVMyhxOA0vIA25NKDxOq0D3pY9muD3iKxL5Bkixi/Qtt4fQ5C0v0It9srnQWpIYejhvN01BAItwgHIGCYfvkzrqIRuqTL3U1uXDH+2ZGRmjR30Jl0M6liXAWWxBVCgYuR/NuqzVnqYcjFBI6Jba5wk5XzVuqXb4h0yPdHpqHuG8Em3sf+XNPdOMP69eAzOuc48kXt+2mzKBfupinxK9ZN/dGHSZhjbCAv5dZC4fxRdkx/3nOrOeEiPjgsGWR2JPXqV9X7+TafVhOUktiEBPmDnBa8iZCQYt39sQc9GF63deKDhiWlb29xKZqtgSEakLa8xchdDFNnJCGOoF1J9RDkboNINgFsatpDnlVzU1Fw8qg+fFGghdwiAsxamqSm+lMA2KmtsbmXXt8NDZD+LvlHEEQDWNzA/e77vU9viOsHM/A8bfR+Md9JMdvDGmG1Z7Qyu7w==,iv:oa3N0ZYJjbNusFKZRhWDbUjQxxYqyraTVwIft3T16iU=,tag:4Wh70U3pejaMfOyJbHMwig==,type:str]
-atticd: ENC[AES256_GCM,data:ONcE+1ulqKZrAEyNlEbxaoghEIypknvfHQuuL4Rs8MWVv4gAfZslML/0Tp19IjK3IZ9lQ6ObhPamQzZlHWDLfhhpOxWUAUBO3mShkfU3CMysP4PCzLjsfqwUiDXvQRC64ti2ShaRGCPbp2P4vKokgrpFgnha0nqKLa1x316pKPNXif9uyrj8wg5JtW3CV9ZLi9+DPDCslgONEq+J8EZ06VdeQhbI0hI7Qwt4vo1hdJhA7AHnplWtc3dGITOUy2g/JQFIMgKvW5TuJKZXxtoSpkNndRPPphe+G7Bf39EzII3MXWz6QhYo/nFGuhrsDVZz43OKgDXZbOmKY4/DmJSr+Hrx7AYYN4btqK8=,iv:/V4YMgtd3+Ei2kYT+4AMYE9mkoiYbuFAmnj1A49RZAk=,tag:HMg75c2aHgoYbV3KBRmjgA==,type:str]
-caddy: ENC[AES256_GCM,data:ftZXD71OrgntEIm38BA8BgyuoC1Rem2RN9DgNbMCxjsg3MxwliZT//EkqwM3gYXzmlW+MfHo07roHMDrYrnfnV5re9usaN97QbNqraAwiOPDXO7L+9o=,iv:MQ9AyxzmziDrLW/iG9UUAynsoNgl4S+iLvArjPAAlUI=,tag:trrjXoQgOivznnj723+qiw==,type:str]
+acme: ENC[AES256_GCM,data:HF1yal5jYhASylDgmr8gef54C8jbTapwYGB1nTjjqTJhI02Hs9nd7AuWcCr1gBQ5P7kaWVQVngQb534c3mvkvkk=,iv:K2uF1hSGQqhd295xag+BeCravBKetnMc5r8Nd3RAIk4=,tag:YyxlRmEAs4s2dlwyuYD3VQ==,type:str]
+attic: ENC[AES256_GCM,data:oAnyLWcO2ri1KLddYSShik7p3+fRUslWlgtvPwSuNdSPMdqiY8k+aEqc7JHKTUVclLI+ZWKtON4BuHK2R0Y2BvRIylZ1cKGD3Xn8K8O1QdCshQ1ZlmRl/l8TNmWR+5qugVGzK7Q67HOcmD9hvDeBR7skiGE6oG+Pe4Wkndm+k6Y60Oh24C27X6VqXzqyJbthlgmPCYE3hYnkB2RhcWEavrDGTsbQb/FEhJtWOAhb5lHON0qeVTDHE8NzZ++FnZeClIEWDyPlc/fW5FdfXVIXsUktweB1KXs1XTEc22IX3O3NOg/ZF8jwCulqsgvnyTPQ7lBKleGSOOl7YfmCXGbxODu/+VRuRuS1uEjKMA4YfgNMFJoDZi6mayGA2gg+sFV1wkUdnhFFeB3fpBraSZYlD1bXJBocjReJ1HNXdCm/ENmSy58uc8g8uY7z45nE/Gy7HixGTJsork6pM2dekLwaEPBI+w==,iv:oa3N0ZYJjbNusFKZRhWDbUjQxxYqyraTVwIft3T16iU=,tag:kax3MPU8GrecHJXK6cXGhQ==,type:str]
+atticd: ENC[AES256_GCM,data:u3ytIxXlxKTZk3bPnGIQoI/dxpfpSh6P6ExjnpKbzxR+0G9kBuaRLPYhRpc96vzhw4WJa6wNujy8URWwjZdFQokQccWK3+vGKgN/6VZhGJ567Gy2fZjW0HDjWInZJ7MfKmHhtQfffJBdi+gJzogHCZPFsLEwJ15bP7zGG5xaYCv4V/bVsrNdR1GDMQyJaDBzuzD37OrYtbmcSVbOIg/ko1Vq9+oPeCEDqoWjiAUKUBYHn4Nm1jVg5FhiocDDIhtKDxFXIvn2hheh9pf5VOtX1X49Htz5EDKZADkKl4fbzOP6Qke9GtGVQ+xaKVBTfNOAdIEsjFrwPtKgGdrPQFQ9rc/+pB5vbPPXtUQ=,iv:/V4YMgtd3+Ei2kYT+4AMYE9mkoiYbuFAmnj1A49RZAk=,tag:ZtONpcPHbxluAPTG18kqWw==,type:str]
+caddy: ENC[AES256_GCM,data:qMZ4NTqtLkiYHIBuaLTt4NmiXLHRMuXvNaZ3/VrXKQuYch9Gz/gEtGjcGOSZBktqhR63IRmcZrHzXB5KCOXNBRKCwMWZM1qbjdvAHO/TKI1PTJAbZ6k=,iv:MQ9AyxzmziDrLW/iG9UUAynsoNgl4S+iLvArjPAAlUI=,tag:cmP9j00r+Tg3WmwWFxi75w==,type:str]
 plausible:
-    keybase: ENC[AES256_GCM,data:7B5sIb/EZZnUwk6a4KqYtO9X8NCNJCLLmm0d0tz6AMcy8cqUUdXyaj/1r3SOuEOSOqGZsHOQBQaRGErOR+4SBw==,iv:w5j6i3rV2erIuiB1UV8Q1di04ioNFXHgCMowxA9rms8=,tag:PKY+zsipffnt9PkKwpgaFg==,type:str]
-    smtp: ENC[AES256_GCM,data:ms0fedI8t+mFDmOQ3I/HU6WIX+s=,iv:nJY38pX4mY9if4E1TWBo7R2RmTMLcVx07tf0KdCmYdU=,tag:nU0b1PmNaK9hlrbu6r7efQ==,type:str]
-    environment: ENC[AES256_GCM,data:oGRBGFuaAcFPhyUHHK/taLRPsjNFbQjw361Q4t42IUf6wqC5bKZ3Ma0AtRhkEC/B4Z/CJT7oQRv0CAhzsJTOgZfM6P8wg5O3SsfTN8CweFCs+NJG5EfAHcLMm/mVWeW7T+7k94q8j2LciDBalpL1gbVja8+K2Tt8Rw8B/lChika3MJ/2k7GFKLwlu4Pkzdq2NfWWyM3Q7yLcyTA6yGU08uIMG06VTWQ+EOnqi0RUHFEUWVisEPC0DLs55h247HhNAewQ5bPUSpsFas2bwAvzAybmp8DLxXeaRHe9Wloj5rzoYeqfnis2GhJHrFrfeA==,iv:W5mrEp1U6o9fPn8etv1ziMqoDp2ucjG3S5rR3TsSqwo=,tag:31rr6xeLrSVrr7xpV6qU9w==,type:str]
-golink: ENC[AES256_GCM,data:5+d3ixv4EYhsBUA8yNzYpSqZy1nzCrdFXu8Yl5JZH+r3Afm0G+JawJuuoeN8DknlDXOIcElPOwSV9K7TdQ==,iv:sR4BLghqQHl4RWCGFovgMYSVNT4N5U0F0bC1QDRCMw0=,tag:/tj0sdnlmQRoUYqfcSFbCQ==,type:str]
+    keybase: ENC[AES256_GCM,data:3padOS0xjwY2LxCUUNNu/jg24UP0Yx3vPxValfoSKD2oCvdtNG85nTnD59Quf5GvPdDKtu19P4pnq/sgdoRA8w==,iv:w5j6i3rV2erIuiB1UV8Q1di04ioNFXHgCMowxA9rms8=,tag:QI1LvqQVjXASZBl9+h7M2w==,type:str]
+    smtp: ENC[AES256_GCM,data:EPT/Ll+MN7MAcVXYhDTE0OB7zaI=,iv:nJY38pX4mY9if4E1TWBo7R2RmTMLcVx07tf0KdCmYdU=,tag:CUQ6uMjqdqKXMJaQo/Izbw==,type:str]
+    environment: ENC[AES256_GCM,data:67/uf/1DbG4sYW0CHELh0GRhYOfy6UTV1el93jK1c7PMZk/PW1lzL+BSSN+w/QREW0r5OlHUDEAQGYEMQjCKjjH9pOOCZrSs3CNrClGd7xf4vQM3Fcl9vFd3VdvQcEw6OtuPmGaS69YUgZOw4tK5RHTi4QgpykE5yiBTXx3V4wL78OVD1YVYIjDTaAmv1HXhYsJGuRAjc35iATKt3wL6oyXsQqb+gF4/9y/XwlGeyVF7kSaBjqb2FsBbleb+5/jcSHkcKHLsBUKorOIaEq4xxePqMPjCGxECoAs+DIQoHmbHWC3O2b+K+jEeodyG9A==,iv:W5mrEp1U6o9fPn8etv1ziMqoDp2ucjG3S5rR3TsSqwo=,tag:TclOvAMuerTX9PgMJYnE8g==,type:str]
+golink: ENC[AES256_GCM,data:KzthCkvJq1W4qjQAqrgrCzOpFu0xeeD6gbYJSa8FLZ29C7n1goGzUYG+iTOLyTcEoXlsFPaNCcZ0c7Y8KA==,iv:sR4BLghqQHl4RWCGFovgMYSVNT4N5U0F0bC1QDRCMw0=,tag:q1vXbhCjorT8M4QEkdziYQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -16,59 +16,68 @@ sops:
         - recipient: age102w4y6gsntvw93n590agqdg9v3tt8rs0x2kpunvu39jh6lyvdpeq7ct844
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0RWlIM0JqTXZHQVVtdjRP
-            UC92TVNvSlJpK3hGNS9jeEIzVTlVZitKT3hFCktOWUl2SW4wUHpQUmVsU3Y1NVhM
-            emYzR3R2cFFYN2tiUitUYlRMakJvcGcKLS0tIEdEQ0o4TGhNOEJLWExSZ3lLcXdt
-            K3BOSHNVL1h6M0VtRkxPdlZTL3d6OVUKsVDJRDBJZ8DDlGdQn5pYCXCKRP80TeaO
-            x+U+P2ckNGSY5guJZS+pbTmGcEwjxao7rSJvOg9Au1DCIhWiPxWM+Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTbWxTWkpCY0FFQ2V0bUFT
+            RktVVXBzTUROTkRUb0pDUDdJQW9mTkp2bjJNCkJEVGRBWWhSVGQ0ZFlEQWt3TStZ
+            cVZkaE02QnV5UkZPdVAzdVhNQXVISUEKLS0tIDg1WmZFZXlDNEFlZmdkVld5K0U4
+            M0Y4ZWRYbFRsNENqV0h2QWY1ME1udUUKZJ7VD/eUz8JlGIy91+R6HFtFAilbjAQP
+            3u//uUSe9Xiy6MgD6uetEH/lXMnmmGimGmOixQOzcgyTyMfTA0f2sQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1cfd003wlk8w2hhtlwflyuc6lzwsswc48kpl9cafrg4kc5jp3u5rqckcf5l
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4L1JSeUg2bFllUFU1clBY
-            dVo5MmJmZDdlekhaTVU0QjJZdS9wcmIzOHdjCnJKSTVZMDhmUGFibUZyZEh3Z2Nn
-            NklIemVsaHVLa3oxeWFwYVo5Y1FtU0kKLS0tIDZORU1UMlZISkZDcFplMnpxRVNw
-            WVQwcmZCWEFSaFgxVmhJc3lCb3QwR3MK2tfVB33YqUu5Bl8z0dQvl+JPQ5k06YuI
-            5fGvDR37VTKk8AUV+SAKxpjVAGhpuH9WPCNLCpIRvPjxs7T7oIKjow==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQnBFR2tNZXQwakZlNDBv
+            ZU0wakdob2JiVFV4c2lSNEt5TVl2M3Y4eG1BClhZcU9LTCtzbzJiZmhGNzNwaVBJ
+            RUh0ODR2aUpwRit3WVUzeVpHbG0wMGcKLS0tIHdjRDBQK1F3Y3lFcWhmMkUrM05h
+            bVdnQi9yTmF4QmovMjRYaEc5ZG82WmcKATyuXl6jkFJJk7qMQKeyKNTGIqkw6DRZ
+            muULjkfxaVq1163UW8wg1FJ5q7ktlsweOkt9WD9qzC5r3vsZDqwjdw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1z9ka8nm4v5rrgxr72n3mmxdtlq4l468rhn7sn57kj2qtd96rff8qqqlzap
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnSmpNd3RBbDR0MkwxWUUy
-            ZXlESG8veEVTQVVJU1Rwa20wdHErTWY1RldBClVOdnFRQW55cm9pU1lFc1JlYlVU
-            dXpFRzJYVmRxeWJCN2tIL00yNGcyREEKLS0tIFNzSXl3anNIQnZ6TU1zcERkRm1E
-            M1dzTDFWdnJORSt3MFlLL1hDWW03RVEKcoQam6Tz++0OzZyZvQDDpMpIBmqu0e8+
-            cBdgOcameZ7WLglB+HwGqE7wB/p5SjpxCw7inBCS20fA0ccYo8mLgQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4Vlk2K1BFcWZZaGRaZ09Z
+            TFdsYTVkYUhHSVdRem1RTzJGMmRFMFY1TERZCmZieTJVOVVYQUYzOUlKcVNjT2pa
+            eUhWVlZhRnpaSkh4R2xzU3lNMnRNa00KLS0tICtRNnc3UEp5UGdRY1YvcnM1WnNz
+            SkpWRk1XUHZiSHplbTJFTjN5MG9Qd0EK5sWcss4XEAWxCrV3j7wwDC5H2L9NnnCq
+            DUD6teK+LLSrMowPUI+gzG+19vmDGZZljvMx89TwnwU1Sql2BRjdUg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1erlqclg0xwmyxj339akx2xeaq3crapxcd2qr7z2hjy5q8v59aqfq2qx3tu
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMS1JRcXUrSy9FMTB0VVpJ
-            VEpFalhkaXlsN2Myd1NoQUNRZkUyT1hoOXh3CjdxNmhwNFlKNVN2TVM5dC9Qd1c3
-            Vlh5Q1p4SGpCOWxRdjhJZ3UzOHN4ZEkKLS0tIFRqUmcyNXc2TEZJNmpVeHZ2cFJS
-            Um5mM2svSHJuZ0RtcC9LUkdwZEV2Y1kKbn8EkOOzNfP+p5JtDurJnUwiJyot3jsf
-            205y+aVrSWSVmTNKg2a9SYx3G5+wfUFrwbwmYinCYiL3UkELM3CNiw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYdkxncS9yMVFnY25vYUcr
+            QUxPdDZ2UlBGV2dmRFIzcjZENjNFZytsaFgwCjdjaThjODFPV00vc2hXZm10b0ZB
+            VjJZZUdMS3RNcUgwZjl3c0ZYMmpWMXcKLS0tIEEyVU1GOUYxUndyT3dQemNVSVBG
+            U0lLTlUydWZIUnZpakNnb1dYWFBMd3cKBBF5ZuFhW8MwqaIhlk1kwppndL+k00ca
+            MJp1KewzUgmwT8oJJKISjOVjB3cjvJaPh/DkgNrJ+3VxcVa5VKTarQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age16urcveanputmn5vrt579xnk2pk87mlv0d2fmwzn2059qtzklmq9smj34a5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSMzVEcEtlTC8rWjVmdjZQ
-            Z2tMSGdoRHR3Wlh6bk03MU1SM2xrcVBMN1g4CmUrb2NnTmk3TS9BVXVtZ0ovWE0r
-            TXNIOHR3UFg5Vys3MzlHVnhrSHc4SkkKLS0tIE9uRFNGb2JVL2VmZGxnZFBJeGRw
-            MnVmS0c5UUM5bTN2cHZEbklJd21CY00KCWmd+/9ICnOrGsX3qiDk03PKM61uBvPk
-            ypfomM00vur+2tj0My/LccC1Y/keVi5yaY300QvXYxYeqt47fs1LrA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDRzB5OUl4VGdPWHByVUhH
+            ZU5mcUN4WFVwRFdzd2h5NzlPZ3p3UWxEOVdnCkJ6NHdhSWRmdk1PUlBUNkNENkZN
+            R0VyUDlXSFIxRXZrM21GMGw5aG00NzgKLS0tIG5nNUhkU0hHNFVzSjhLMTdwaHRW
+            MVRhWFQ0bmlITzdmU3dKN2JaZGxDZ0EKGXfvAJWTLXwzyZU7l9MKE2wruTULHODy
+            PZXlnSj5DajKKZJMxM3Yqzgogkgcvz0Khe4+to47RFhKchg5cOf81w==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1s3syz6jhdj9qqz4lcu42uxckpn8na56qa3sehuy6cpwtypf3349qkjry6v
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUTnlRazZZUkViQXFaeDIx
-            N1B1emlaWlZid2R5ajQ5ZnZhMTFVSFlISFJJCmJOalo2dXNGMEpIWHpxbk1VVjlT
-            emFQTUt4MXgza2hQd0NVT2N3MjJ6WjAKLS0tIEIxU2xwQjVQZ1dHZlJOSUdrSkZX
-            YzlBcVJhUXNYNmpNWFpzcURwZjMxQVUKD8YktFFC99MdM0WvFtLUAaby/hMwt1w/
-            kAV/K10gsXY8AuMRc7xThHODiHytnMiw3cmk6GKZ0muoYMINLrTIxQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxMkRBZzU3bERaTmVSMkta
+            OHN4UlJ4ZWNmVmtpYmtzZ2pVaTJGSnJuVVhVCnBQS0t5NHI4M0xQV2wrNThlTjR3
+            WXVtWmJ1aHFsSS92TVlmOTZIcytJN3MKLS0tIFk5bjZQRzY4NmZsY0ZWRVUxaEtw
+            MVZEczdTall1L3RuRHFBREovVmNDbUkKhAKJyfYt/BlEyLvyK3iVJBxPfqmh1Lh5
+            sfd2Lccdi++lWWIC9N3boIDy0RH0G8BR+aW1DibAGYr/0sQ2Wa5X6Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-01-01T01:58:00Z"
-    mac: ENC[AES256_GCM,data:UBwf5wuFrWLINaD3VAOS9K75T6VrW1FDemlh4R0T4LpCoQLB7YoIpn146xM3EXV8gmWwF/VviqOCvzYQUp3hKAi+BE7ZVXhis+4IFYZFWcggFozaNR2OIQLIQ4VO4zfZD7sABDpPvHWW/zHAEanndm5axT5LsMQQHV8OU8hinH8=,iv:Me4iCApjKHhILGW1hQg4uW5POtZ7OdooL+5rirjfp5c=,tag:6+1bPSaJ0QDxhHilh7Vmiw==,type:str]
+        - recipient: age1lchn0h0a63g7k9zl76f7nuylp5cl9ak2f6ucy87q0gyk8qa8negst87jle
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3TU5US3ZYd1IyQ0lGS1NB
+            VlA4ckFReHp1N011NDJCQy9rVGI1Z2E3QTNZCitLUUxnSExNR1Nmcm5QZGtoRTJw
+            a2VGd2paNDQ0VStGTXpMeGlWWDUyTkUKLS0tIGp6MUNsZlphOCtCRXU3d0EvYitV
+            VTlBaXplU3lyT2ZWQmxVZnhoTS9BRm8KHvdSu5YpRCCLwO9gAo5S+ILJH2cBTqdr
+            bltvrRKIhGeyGBbprc1dhzSEt6eP5jLIaK0TRwRT9cM+O98oZidDmA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-01-01T16:19:16Z"
+    mac: ENC[AES256_GCM,data:H7V6a/znYcvveybfOfBY5SU+lZ6rc8pIVOQusWQH/AItqtZPqxWLGRxcXljXNarkj7deKrAS+en1kOSuq59in/VOvvjkSOdeZitxHwVJxPHnVDaarqj2Bm1+X0FsH2S6aidU8QEpeRAhbHIj8Q2mlMDI6ha/Je/N20ZP2hRm/T0=,iv:BcdYDsViZ5TeLVVEHdarXpASgS3yH/u/jh00cvFnoRo=,tag:YXQPyhxyvrV1EgXSmzaAtg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.2
diff --git a/modules/nixos/garnix.nix b/modules/nixos/garnix.nix
@@ -7,6 +7,17 @@
     garnix.nixosModules.garnix
   ];
 
+  sops = {
+    age = {
+      keyFile = lib.mkForce "/var/garnix/keys/repo-key";
+      sshKeyPaths = lib.mkForce [ ];
+    };
+    gnupg = {
+      home = lib.mkForce null;
+      sshKeyPaths = lib.mkForce [ ];
+    };
+  };
+
   # https://garnix.io/docs/hosting/branch
   boot.loader.grub.device = "/dev/sda";
   fileSystems."/" = {