From fec7bec6846ca6bfb3f156976bbc383f9fd0599f Mon Sep 17 00:00:00 2001
From: Mohamed Chrayed <mo@chrayed.de>
Date: Tue, 3 Mar 2026 15:24:29 +0100
Subject: [PATCH] sops configuration

---
 .../security/sops-nix/secrets/secrets.yaml    | 31 +++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 modules/security/sops-nix/secrets/secrets.yaml

diff --git a/modules/security/sops-nix/secrets/secrets.yaml b/modules/security/sops-nix/secrets/secrets.yaml
new file mode 100644
index 0000000..eabc5cb
--- /dev/null
+++ b/modules/security/sops-nix/secrets/secrets.yaml
@@ -0,0 +1,31 @@
+#ENC[AES256_GCM,data:NKvpQs/Tyxu23/TqlEem2fejIWpPKOv5TLg9Z6vFFDQT2a7KK0I=,iv:uQiGDi9B9fHDAFIc8W2QavHNY+bEcTPjoMGP4JNXdnQ=,tag:9xAAR8Uw9JZnw8BJsUhznA==,type:comment]
+example-key: ENC[AES256_GCM,data:MJP1eX6SVukhMoqtfw==,iv:5EYaZbkk7X4BNxdfQInMuoFpYESryoj5/JyEA0MpGDg=,tag:vv/g++IDLkpdKFqtkN+xaA==,type:str]
+#ENC[AES256_GCM,data:d3t1xWgkI10ISVPxNsqkAxTN7h2coAEtrdwGtJ1U+8cU5/SSRO6NAPoy8OB9GRGHuHvZrWJmTwo=,iv:wuoPBaVwsmUr9gL82RVnHEG4iC5KS2Qh6LfUsW0Z+GY=,tag:oeXQ4ceuuOhdiil3aHMoww==,type:comment]
+#ENC[AES256_GCM,data:bZJ5Q6qZNeZBtWj3nMTQLewqgs3K60Vni0OP1SXKjvfe+24X2qgKsiD5ZG4jU/wu+WpOC1JkesaXGYn+CR9wFg4r64K4I88+,iv:7hC3F5t+ax9juJf6Ay4DvVeAKLnCMBO8oJtmuoZut+A=,tag:MwZvdMJYGNJR8hcUIbj9QQ==,type:comment]
+myservice:
+    my_subdir:
+        my_secret: ENC[AES256_GCM,data:Ys6bAkygd/p2,iv:sK4j7/spCh4rLQtaenTMkUtZnnJVqDU8hOjntyImajA=,tag:XVyLveeyNuz+59XDhQDEEQ==,type:str]
+sops:
+    age:
+        - recipient: age1yw3dt8myjpq3hek6gadzy8jd04l30ladgva7p74ktl7plfkwqs8qmk8c4x
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDMzF6WTZXRitScFpKdG1m
+            aHBnaThnTmkyanYrL0pIWGlSRXhlTUVzQ1RFCnJYZXBXeHBnN3dWSjFUbDdCb2tZ
+            NU5ZTE82VXltMVJLT3YzSVRIRWpUWkUKLS0tIHhtcno4WmJ6d0Y2NWkrOTZiWkNS
+            Y2xSUE0veVdCaERFUXpVeHdoVUd5V2MKV3DDB8WfAJkZ91MdWzz5Yi0D2u8ozeEi
+            AQY7by2kpV4oJWG96zu6grR1FU/jNqaC+qTCtIcb3/e7pK9pHdstow==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1nkqrkx782x6hnn5l8trh2e4v5pgygkx2ql4w8m20pc9jzsq244zs8d44qw
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvTFcwZnB5RGNNZWQyY2JR
+            ekg1c05BSU9Qay9RYlkxT3pCWlB4T2VJd1VJCmpuc08yZlhZRS93cnpoS0lBeFVY
+            ME1xQUtIcDc0aHJqVmJjUy9BbjhCMG8KLS0tIHpsMGVLSlhKc3JUTlhnTE1HbVUv
+            RVVGdEM3UFg5Y0ZhQmlJTGg1eUQxU1UK0U3aR79JWeFyvQRDVVmyICh1UTDIIeai
+            6E87FDE9XRhAbneR5sHw4ujnZCSyX7njfDMpN23dpWX3smRRKVIsNQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-03-03T14:23:42Z"
+    mac: ENC[AES256_GCM,data:3S6aqf3bUxwwgycYl2jZZMmrYQr6gC/OdsAwC+NLwV2w+IRUMtEJL+h7L6uK0Z/5GyU1k8CTPJWS0XSpcj3v1VQFnpc9PBJbbgGPsArYOEXs8JrWSIDUB8mt0uFnjpuI9on5OCm+rE2Fv3v/3HkFXPnNc4qqDfp8cBGvcVsI5bg=,iv:ArCc9QS8mjaVTjazcmAqDXJZivqzQ/qNZVJAaUThQMk=,tag:zySo9v06mFZJk6+2Egkaeg==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.12.1