Merge pull request #67 from entropia/xanderio/rotate-secrets

rotate secrets

secrets/services/tandoor.yaml

@@ -1,7 +1,7 @@
 services:
     tandoor:
-        oidc_secret: ENC[AES256_GCM,data:ZlZMO2yL1fCkQRcCvKwmzo3rVFxm01Ic9eVW404TzwE=,iv:2tXWLyOf4HgrpJD5tfFNWl/JMgl1Snou1GZN25FtV1Q=,tag:cp4g84CPHQ8vWB/onmMZ8g==,type:str]
-        email_password: ENC[AES256_GCM,data:WHMlZwzuy9pjhkE=,iv:IlhdC5npH1i0XcFt1IHxmxBb4CFvD7Xf6R6ziXpZpgA=,tag:yU+R5UrNBNhQSuZ3r2BlCQ==,type:str]
+        oidc_secret: ENC[AES256_GCM,data:p5rIyL99AHNahf7243o48Bc4+N5k53L/x3OLKxypFag=,iv:gjm/qupQ3glSmaIoVmvEMVjd3Iq9xhGgZSOLT2KIo9c=,tag:xm0C7cqo9nIn6nBuf30YOg==,type:str]
+        email_password: ENC[AES256_GCM,data:CLwuL8tDIfiTDzk=,iv:6Qf7Cy2NPrRVWgQ/Es8eke4gPTqWDm9y7sZr8OJ2sl0=,tag:mBz2mtYQ0fKf5aUsx9M7jw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -26,8 +26,8 @@ sops:
             ZnJ2N1NzWUFueE45OFZualQvMGJHeW8KGSBoQIiIuZwwyb9mMGdSQNFTcGlGsHK/
             iQxdFKTr8JtTQwb4aRpOgRTvyf1qh+RAdvhZyGYmkFrENLzcXOpEbw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-05-26T13:45:06Z"
-    mac: ENC[AES256_GCM,data:x9qZQtIrNvNmwVj2b7Zvr8IWVopYEakzfVu890Bw1okejMnn369WsmWZU6eC9QvDtvF+tvDr8dV0hqhw/MZxW5snCOtWNowpF9hzFYbfOI447tcNlU8DqaSCSG3O3b9KpRUSM7dv5lyo9gH2d6YBFWB5RGK6hZR8dzxw1RrAojA=,iv:2C82F00XgQ9rpJT4961P+KRwc7M26ZhRBUaZ1ELUyp8=,tag:qcrxrBFCfD/291fqI6FnuA==,type:str]
+    lastmodified: "2024-08-25T15:30:15Z"
+    mac: ENC[AES256_GCM,data:n4VYDvBqPdSCAwjX9e687LPgoYrU5fp0hzGx0Ypkd9eQIrte2Gu6zPiO1vxiRlJtjKX46SwBdFFN6+xt5pjamhDw4WeToocNfZaVdc1c4VPOWVKVXI5Fu9Y3pNtZQorPQsTO0XRr1blUTaYBMrdy9vKViCO9p+BPTZ5jrIJuYz0=,iv:1mvDm+yjg9AiAue9FvgEju0SQe/ISl/NmCBsB76rixg=,tag:aT+G2McfhcEknzFec59XKw==,type:str]
     pgp:
         - created_at: "2024-08-23T20:50:29Z"
           enc: |-
@@ -41,4 +41,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: 09E8418B46B53B0F825DE4BE018ACF465280F466
     unencrypted_suffix: _unencrypted
-    version: 3.8.1
+    version: 3.9.0

secrets/services/wg-access-server.yaml

@@ -1,6 +1,6 @@
 services:
     wg-access-server:
-        secrets: ENC[AES256_GCM,data:d6y/pNfc6jpHJgmFQzXCw5Hprf88NRL9T9h9gTvmQU03GaPF5sCejhAo33NzABJ2o6kh0RkxmBVG8zpQz2j/qxy4FOAx/dnvCVojZaz+erBrgdCFYSFEMR1zq7EwosLpIkbEYVwTXBn4uwJGp1D9mTkPNLS+A0+LwFWtjw0qsGAfEphZ7odCeXdHm4pFOswRsEQkVAHiCk2n,iv:3foC3EuKRpym6o9nVk3AtERMFRNV8SZsXBibnAqQ/nk=,tag:k1MFw2uXkzNYz0bdeA8RKQ==,type:str]
+        secrets: ENC[AES256_GCM,data:XnoV6WhqlYzQNw0EJzOXK3CzqTpe87kpkz5qtCnPTl80hkj5aizWRKnmNe3Xgo8uX80mJ6QB9CbTjUZU2AyLSnIVTPaUvI/4NyatzLCHaLylNjK3IRNKeiL536ZV5mNd18zUolu3nmbyoo9/Isk85ppAGyykgojwHqZJTLgr7IINzyZ3CUAtlVkno+/x+9d5nojTDFWFkeHL,iv:CNkQEyQpqfutKild9P9+Sm0Usw7J0qmreq+GQ7ichS0=,tag:3eegZnH1McFb6iHvHNXWLA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -25,8 +25,8 @@ sops:
             aHZHYnU4QUxmeUpyTFVzT3Mrak1ZZUkKTgB0fYtUn+1+Qf8jQ6mUqZo2UO0U4kCI
             +QEsjEElTRnGtitT66e/wa+Ah16i/5Ow/XVxUacEAcC2K2EQF2cR9Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-03-09T18:01:01Z"
-    mac: ENC[AES256_GCM,data:T64qkDpdHJE21BFLwi2GMdCL4+0cqnndhXGw58MRgA4VN0KT0ui7t46eisB+8ZwLHnrHHws43EOBQ2Uis+5S9npfbe5P3vE3fgGdkMQicRPbgg8zNMxofH6JoUHnzIX2lolMHzo7RGse5PYfvNS7mr4iS3LaqFtqx0T37KkA8bw=,iv:nXcnf1f+4rtZzkJ89KD/+q5WT6QRUBoOmVYDiorWpg8=,tag:KopxFA5hoMTFK7b49wEWKg==,type:str]
+    lastmodified: "2024-08-25T15:28:52Z"
+    mac: ENC[AES256_GCM,data:xOjBLbOxhZtsVscmjOlw/UxNS9q89egUUGG0DlX9Rmida0qw91b0IsGjZOD0hicIedLW+P/fbzWe1eQDjYVwnV7seAY0Ch3ynyfFA4N1TrxS2Vq6yJZSZskPasYAG0nWRHpGFUuYWbpDWLMtelKNGC+hvETZ2rea1ICuyUhyzt0=,iv:qkUn5R89zzAJ/E/NJSCL3DWZRShoxgGsYPrgD5plwLM=,tag:gJsBuIQ/j9j8JU6z+vEQLQ==,type:str]
     pgp:
         - created_at: "2024-08-23T20:50:31Z"
           enc: |-
@@ -53,4 +53,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: 09E8418B46B53B0F825DE4BE018ACF465280F466
     unencrypted_suffix: _unencrypted
-    version: 3.8.1
+    version: 3.9.0