From 5d65fc99d3c7b19c1c6a456723099ced20149367 Mon Sep 17 00:00:00 2001 From: Ethan Turkeltaub Date: Fri, 31 Jul 2026 23:26:51 -0400 Subject: [PATCH 1/2] Add profile for AWS secrets --- hosts/bastion/profiles/caddy/default.nix | 63 +++++++++++++++-------- modules/profiles/secrets/aws/default.nix | 11 ++++ modules/profiles/secrets/aws/secrets.json | 52 +++++++++++++++++++ 3 files changed, 104 insertions(+), 22 deletions(-) create mode 100644 modules/profiles/secrets/aws/default.nix create mode 100644 modules/profiles/secrets/aws/secrets.json diff --git a/hosts/bastion/profiles/caddy/default.nix b/hosts/bastion/profiles/caddy/default.nix index 520105b..65111ad 100644 --- a/hosts/bastion/profiles/caddy/default.nix +++ b/hosts/bastion/profiles/caddy/default.nix @@ -1,18 +1,31 @@ -{ config, hosts, ... }: { - sops.secrets = { - e10_camp_lego_route53_credentials = { - sopsFile = ./secrets.yml; - format = "yaml"; - }; - +{ + config, + hosts, + lib, + profiles, + ... +}: +let + # Parses a port from an address (e.g., `http://foo.bar:4000` -> `4000`) + portFromAddress = + addr: + lib.pipe addr [ + (lib.strings.splitString ":") + lib.lists.last + lib.strings.toInt + ]; +in +{ + imports = [ profiles.secrets.aws.default ]; + + sops.templates = { e10_video_lego_route53_credentials = { - sopsFile = ./secrets.yml; - format = "yaml"; - }; - - e10_land_lego_route53_credentials = { - sopsFile = ./secrets.yml; - format = "yaml"; + content = '' + AWS_ACCESS_KEY_ID="${config.sops.placeholder.aws_access_key_id}" + AWS_SECRET_ACCESS_KEY="${config.sops.placeholder.aws_secret_access_key}" + AWS_REGION=us-east-2 + AWS_HOSTED_ZONE_ID=Z01153052TLZPYRX634V + ''; }; }; @@ -67,7 +80,9 @@ proxies = { "e10.land" = { host = hosts.matrix; - port = 8090; + port = + portFromAddress + hosts.matrix.config.services.caddy.virtualHosts."http://e10.land:8090".hostName; extraConfig = '' encode gzip zstd ''; @@ -125,13 +140,13 @@ "requests.e10.video" = { host = hosts.htpc; inherit (hosts.htpc.config.services.seerr) port; - acme.environmentFile = config.sops.secrets.e10_video_lego_route53_credentials.path; + acme.environmentFile = config.sops.templates.e10_video_lego_route53_credentials.path; }; "tautulli.e10.camp" = { host = hosts.htpc; inherit (hosts.htpc.config.services.tautulli) port; - acme.environmentFile = config.sops.secrets.e10_video_lego_route53_credentials.path; + acme.environmentFile = config.sops.templates.e10_video_lego_route53_credentials.path; }; "cache.builder.e10.camp" = { @@ -172,12 +187,14 @@ "netbox.e10.camp" = { host = hosts.matrix; - port = 8002; + port = + portFromAddress + hosts.matrix.config.services.caddy.virtualHosts."http://netbox.e10.camp:8002".hostName; }; "cache.e10.camp" = { host = hosts.omnibus; - port = 8080; + port = portFromAddress hosts.omnibus.config.services.atticd.settings.listen; extraConfig = '' encode gzip zstd @@ -211,13 +228,15 @@ "auth.e10.camp" = { host = hosts.bastion; - port = 9091; + port = portFromAddress hosts.bastion.config.services.authelia.instances.bastion.settings.server.address; }; "speedtest-tracker.e10.camp" = { host = hosts.controller; - port = 8881; - # inherit (hosts.controller.config.services.speedtest-tracker) port; + inherit + ((builtins.head hosts.controller.config.services.nginx.virtualHosts."speedtest-tracker".listen)) + port + ; }; "change-detection.e10.camp" = { diff --git a/modules/profiles/secrets/aws/default.nix b/modules/profiles/secrets/aws/default.nix new file mode 100644 index 0000000..f36abb5 --- /dev/null +++ b/modules/profiles/secrets/aws/default.nix @@ -0,0 +1,11 @@ +{ + sops.secrets = { + aws_access_key_id = { + sopsFile = ./secrets.json; + }; + + aws_secret_access_key = { + sopsFile = ./secrets.json; + }; + }; +} diff --git a/modules/profiles/secrets/aws/secrets.json b/modules/profiles/secrets/aws/secrets.json new file mode 100644 index 0000000..72f08d1 --- /dev/null +++ b/modules/profiles/secrets/aws/secrets.json @@ -0,0 +1,52 @@ +{ + "aws_access_key_id": "ENC[AES256_GCM,data:ZmuONF7Onv2bUFWEedx55ds5Jtk=,iv:hUcTKk1kNRSGtdSLCygkzRKqviTifNBdi8jd1tX5wtY=,tag:g0fHVOKnEJEWI02maLNMuw==,type:str]", + "aws_secret_access_key": "ENC[AES256_GCM,data:fTHZOY9Kf+WmegXRhZ0/tEkItZq6fGIbzmmiCHg4/lgrCVj8/djF0A==,iv:8IhdSadRGNWr7F64ILlJDf0C3HP4q8Xugr7YWJp49kE=,tag:WsioNtl3wMjKapO2fSjK8Q==,type:str]", + "sops": { + "age": [ + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVmhEVXBSekpLSWNmeUk4\nbUJBQS9hTE5IbW5uaDZYRUhTYmhsa1k4N2d3Clk2Qk11UVREeVBZTE9kc2FjQ2po\nQlVZdFA1QmQ2WHlWaDJXbWVIZkVwaW8KLS0tIDVQcWNBZDdWYktQaEVZRk9FZVp0\nVXMxTDJ4K0FXemxLejRqZDMyRktFZ1kKLat0YsVUamAsZqmYXd0gEMPdW9JzWscu\n52GWqeM6QBkMpAs8q9auEfzg4ykEj9VvK2kXESs8Uwu/6ZP2/ev16g==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age10539mc6shf02hpa8huyjktdw3nfyavxdg8pt247wwvq4xrv8h5zs8nc0k0" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQUktPZ3ZDUjV0QnFlT2lh\nUGlMbnVBc09STGtNaVhCLzM1T2kwSGFScVI0Cm1WL3JmM01pendET3djTFZsb04y\ncDE0Z0pjb2luWVk2UVgyODZFQ1JaR28KLS0tIEpnRkNydDhZQ0xwcXRsVWhvcWpO\nQ1hoN3dlUklaOFVLY1ZnTjZaV0ZKVVUKoXUBfyeUZ5GHXy1p9It2zMps9HJ2AcyZ\nqzvmNjFdqErixzRY/52/yptOBQMzRkDi5PG644QZ1gPtdaaSAVxiuw==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1g22ghnrdg858yv6w2ux8hgntj8gkdyjn28axdkmzyx38d4vx6geqj4px9a" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFdWk0T0JqU2RydHV1ek1r\ndk0vRDNlcTkxNkp2V0x4VGZkZmZrVHQ5eFZjClhzZmdZL0Q5N2VDYUd2MlFhK0g4\nTFplT3VnUkluRTg3YU1wbk9LRUZReFEKLS0tIHpHS2ZLNVBtODBaNlFlVlVlMTdU\nb1M1OHQrZDZjMHZNZzBlWVRSM3BmeFEKG0gYdX+NMKNrw+hZfPXSD0QKSYEGPIQt\np+vxP9S11xbRUzLq36uOHMyvP3RAMGfxmibe8HIfuYJE+jhBrVWegA==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1k5nzxq4ej2u9ls97c2dhlz96j2vghv0assz5g0p4npzyc8c8fqlqld72hg" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAybkxBbEUyZ2hkZFlKcDhX\nZWpnYm5tKzlWTGFwcTU4RkRuUTA1M2JxNnk4CkJTRnREOXNXR0NQb1VJN05qN0R1\nZTNzVHRjNjIwUlFaV1ZuSEVjanFoTncKLS0tIGlHaEVFV0dRRUo3RDlTN1V5RnMw\nT1BpdEw2ekpML3FHc0NkbFljU0FiUGMKWtPw92R5uOkky11Iaer9TRCY2+gl/t2E\nStOCkV/j8WXeJ8HGQQ9XS0ERl2RDESnTk75yuaUgNrgT5pLRioPQvg==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1gkzp905yqkla54l52m4xkqtxpn0sndkx0vh6qqa8d2tu29x8f35q354gpe" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2UTlGczFteklhd21mV1hR\nVFNlR0lEL3JUMmZVd2JCUDNkcWRzcjJWL2owClBCUjErLzNSUGc2SVN3bUhGR09D\nV3Fhc2Q4aENTdkM1Y0VuK3d2eUphUE0KLS0tIGJnYm9QM3NTd2FaZVJ2OU51NGQz\nczFMaUdteFdCbEFaamZodVQ3Y041encKxIQHM1+6aA5xzMNQqjXdg0wqATRd6efL\n1iaOiPoM6zKNTCJ8S8ihTuH7AbmFaaOiVaPNvMNkjUHVa5+w5WellA==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1c4d93hmawmx8nt8g2sjrxcngfl7qx7y6vwxpqqg7grrkhjen6fvstljgg9" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuemhUeGlSMDNUUGNET2Ir\neXJnaloySjFSbW1qeDJCcy9kNlRyWk5iYzE4ClJzV2tKTzBCQktxSzVzRWZDT3ph\nZmpLUFZzM0s1ME9MWkwzaE5wNEYvaEUKLS0tIHEydW1Zb2d5b2VjM240NE1TN0Iv\nbFprNWRwVlZ0SVZCeHJFdHhUM0tSUVEK6/owqnvMfu+5cwLFbJzYwdp0w5mKDsT5\nayMdUaVca7WgnfZrOtuKIqgg97LhNN7HiShAGgxSnyUKoqPAn9psxw==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age15jjykch8km3l8atssu0n9us6d2xg58z0ds9s0djtdh9l954sud5szqxv29" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpb0N6WlZXVktRODJUNGE2\nWDNuQUhBWHE5Z0JSWEtSSUVpRXQ4UDZKdG40CmVqU3BLclNYYmxyeEdGNnBvR0I3\nMEQvWkhoeUttQ0JaM3BRaU10UHgyMWcKLS0tIG9FV3NmNU9SWUR6S0Q1eUhRV1VY\nSWZMeUt2SGZHS0FCYzFHb3B6TDVVb0EKugYBG4IHMrqsHz7JQuBzKygY6YQH3lDg\nPyKLMitrsf1hdJ5L4tdFKXSmQs9ijSPoonJBDgb79qyVHzf1euNmcg==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age10jhawn266e3wr6rx0lndkl9a47ewtk6jgh35d2582uu2l7dtn4tqdqc29c" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxanZLbytWNjI2L2tmQ2VJ\nTDJvcEdqNDN0Qyt6YUZwaHhVdVFrdG1LSkUwClh0K1JJTGcwaERtem9YTWdIbUZ0\nelhmTEo2REtLS2d2T1o3TUtvRGltcmMKLS0tIEIvekE2Y1E0UUtSbkQ3S1FqOFMr\nQkhjcGQvTFVrTVpwN25OejN3bzJIbzgKCs8fZHv4Suw6mpD4LJ0B0czy66pMAWCE\ntWw4XF1VWg/38ZUcV514HGJOjtrC8R6o5AE8vutBcgoYJwtKm44kFg==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1x708x83pjj7urp26pncx67fqz8a3htrf0umw7c00pvmxhl6y95lszjgd6r" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDeTQrcGRNMlk1Yk9NbDVp\nVGFXU0VIMHRGdytaTjUwQVFyWWEzMTZKYVFBCk9sT0RuM1pQamVsQk1jcjlnV3Q2\nMXFtZTVDQ2dENFkwYlpBUGZuUGptVTgKLS0tIEYxK1lIdE5KMXhVa2dZUUY4bnI1\nL0R1OHcyVThGZFp6MHoyWXE3K1FnT2cKHQ0wT7aS++JJ2rEu//+kKEJdtmp7bX7U\nSk6SJEAulswSQn2OQjw57qo8uedjhxZ7qPoIa4PEYdLU+yTyxZFOIg==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age12yvljlgg94z8qfwyezz6mtmrpldxvfcqwzsuyfekszu296fg6upseeyc0t" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIanpPb21HSEFYaXFXR2Vo\neUhOU21xeGpuRE9OeXFtN3Z0ZGhjSHlvSWtNCjZVT2VWenlEUHRyb0hlNy9OOTJW\nNWRncUNmanVKRkIrU1RNdi9tRjZqNjgKLS0tIERXN2lQNGgvZWFMMnlOSXprZXNt\nanEwd01qZEZNQXgvT2E0cWxpSzBRSVkKxbKMZufVFj7PfbWTaOZ0X6JNNLYj1VaM\nK9HkByrAFDTkbI5dAICgRRGfGt3SD+OzOfmsi/E5Y5+q+3XNr8iYsQ==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age10zakwy8z5448vj7ur2h7vn8wfzvt2nxwq4pk4wx6cs34mlg58yasdjhc7l" + } + ], + "lastmodified": "2026-07-31T01:26:58Z", + "mac": "ENC[AES256_GCM,data:0ZDwaRNyKvOR4/ce+VqLrnTY9TtlmcPrI8kXy7CmQlOtGxYK7il/UwTwPl6fyyQu0AfSy+lQOe4bxrQgWHLFkj8Be8ThJbAgCgaC9024aNDUnTks+XQ8Yt/X/kuti0oZ86jDw25c5GEUoKOp0xWIPb5lPqQ5lJiLFVGChYhGnOE=,iv:B/H6qMs302TrHHpAN4/RKPV3OfAG1FBS/1PofjtpI4s=,tag:poZVL0m+zJ9nQBw5DAbQjw==,type:str]", + "unencrypted_suffix": "_unencrypted", + "version": "3.13.2" + } +} From ea44eed986f8fdddeb3935c50ca8afcc8504a218 Mon Sep 17 00:00:00 2001 From: Ethan Turkeltaub Date: Fri, 31 Jul 2026 23:33:11 -0400 Subject: [PATCH 2/2] Centralize `sonarr` and `radarr` secrets --- .../media-management/bazarr/default.nix | 27 +++--- .../media-management/radarr/default.nix | 15 +-- .../media-management/radarr/secrets.yml | 97 ------------------- .../media-management/sonarr/default.nix | 15 +-- .../media-management/sonarr/secrets.yml | 97 ------------------- modules/profiles/secrets/radarr/default.nix | 7 ++ modules/profiles/secrets/radarr/secrets.json | 51 ++++++++++ modules/profiles/secrets/sonarr/default.nix | 7 ++ modules/profiles/secrets/sonarr/secrets.json | 51 ++++++++++ 9 files changed, 146 insertions(+), 221 deletions(-) delete mode 100644 modules/profiles/media-management/radarr/secrets.yml delete mode 100644 modules/profiles/media-management/sonarr/secrets.yml create mode 100644 modules/profiles/secrets/radarr/default.nix create mode 100644 modules/profiles/secrets/radarr/secrets.json create mode 100644 modules/profiles/secrets/sonarr/default.nix create mode 100644 modules/profiles/secrets/sonarr/secrets.json diff --git a/modules/profiles/media-management/bazarr/default.nix b/modules/profiles/media-management/bazarr/default.nix index c1f1e00..48298f0 100644 --- a/modules/profiles/media-management/bazarr/default.nix +++ b/modules/profiles/media-management/bazarr/default.nix @@ -1,4 +1,15 @@ -{ config, lib, ... }: { +{ + config, + lib, + profiles, + ... +}: +{ + imports = [ + profiles.secrets.sonarr.default + profiles.secrets.radarr.default + ]; + sops = { secrets = { bazarr_api_key = { @@ -11,16 +22,6 @@ format = "yaml"; }; - bazarr_radarr_api_key = { - sopsFile = ./secrets.yml; - format = "yaml"; - }; - - bazarr_sonarr_api_key = { - sopsFile = ./secrets.yml; - format = "yaml"; - }; - bazarr_opensubtitles_username = { sopsFile = ./secrets.yml; format = "yaml"; @@ -279,7 +280,7 @@ username = ""; }; radarr = { - apikey = config.sops.placeholder.bazarr_radarr_api_key; + apikey = config.sops.placeholder.radarr_api_key; base_url = ""; defer_search_signalr = false; excluded_tags = [ ]; @@ -310,7 +311,7 @@ year = 90; }; sonarr = { - apikey = config.sops.placeholder.bazarr_sonarr_api_key; + apikey = config.sops.placeholder.sonarr_api_key; base_url = ""; defer_search_signalr = false; episodes_sync = 60; diff --git a/modules/profiles/media-management/radarr/default.nix b/modules/profiles/media-management/radarr/default.nix index 59323db..e372b96 100644 --- a/modules/profiles/media-management/radarr/default.nix +++ b/modules/profiles/media-management/radarr/default.nix @@ -1,12 +1,13 @@ -{ flake, config, ... }: { - imports = [ ./postgresql.nix ]; +{ + flake, + config, + profiles, + ... +}: +{ + imports = [ profiles.secrets.radarr.default ] ++ [ ./postgresql.nix ]; sops = { - secrets.radarr_api_key = { - sopsFile = ./secrets.yml; - format = "yaml"; - }; - templates."radarr/config.xml" = { content = flake.lib.generators.toXML diff --git a/modules/profiles/media-management/radarr/secrets.yml b/modules/profiles/media-management/radarr/secrets.yml deleted file mode 100644 index ecad3f4..0000000 --- a/modules/profiles/media-management/radarr/secrets.yml +++ /dev/null @@ -1,97 +0,0 @@ -radarr_api_key: ENC[AES256_GCM,data:5rPcGq6x4NiyzSSM0C96GH2/z8P2J+Z7O6Zp5+qEDzM=,iv:JzGyPPFaG0V5r6p9l81WgeaQYBjBUA3SB7SwhUFC6eo=,tag:G6Nk066u7ht39LzHsDhK7A==,type:str] -sops: - age: - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrSnM2M1hCSWRVQWdISHBw - WlBScmMvUW52ckVuOWZiQWViYjNvTzBBNzBjCkhTQllPcVZMRXpCbm5kNVVWYm8v - SmFsVXRRRnRtNUNyWWZ6ZExqV0kxZWMKLS0tIFpPL2JJNzIxcGg5ZkNBRHhRQkNa - TTJ0eUpQSEtEZVRUYkRzaTEwbXo2K1kKrDoCpc7gLwyMlAy+9qddURaY2IG5P1rk - Nkc2YkmpbmW9YkazblU9C7Y3L+fmm/Xs1G0s8AFEwcIkPT1AJFgRrA== - -----END AGE ENCRYPTED FILE----- - recipient: age10539mc6shf02hpa8huyjktdw3nfyavxdg8pt247wwvq4xrv8h5zs8nc0k0 - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwelZ3UHVIKytzZ1JHNTdF - WCs0TTdLOUlVV0txV2t2Ty9qek00N2JVdnlvClg1eUdkbmhGRGRIN0NkSmJOMUI3 - WEF0Q2ZGR2h4UTk1cWMweW1UMFFoVkUKLS0tIElwRkZPT1d6YlEyOXNLdm9YZW1v - Sy9YRWhsRkE0dVJ1UDIrMlczN3JqM3MKni6VZfWvOntNpkCu4pmm+6eZvmH/23hS - NVuRpO2UxP75XwNIEqGdqPxSljBxD7X+Flpn708lI8oKCbpedFNF7w== - -----END AGE ENCRYPTED FILE----- - recipient: age1g22ghnrdg858yv6w2ux8hgntj8gkdyjn28axdkmzyx38d4vx6geqj4px9a - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCRXQwL09Xelc5am93cENS - aXNVN211N3pxV3lIcG40Ymd0Sm5OZlZBc2swCmNRMEQrU3M4YTRDN2xEQUhySGZJ - eEtlenJ5bTJwL1YzbVYwdzlaSlNqV2sKLS0tIEJER0YyN2x5SGtwTVN2RXppdUg4 - QmlKZGRkek9ZbmxlTnJvbWVoSFRzNkkKo9ToJ3xvZ8PfO4EdLMyww7p/VnXR3+vR - JM37iSKbPK1mA/MwaortqyZmLL+8RUd3CL1p1c0TA2zCf0MK1QQ8oA== - -----END AGE ENCRYPTED FILE----- - recipient: age1k5nzxq4ej2u9ls97c2dhlz96j2vghv0assz5g0p4npzyc8c8fqlqld72hg - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXWmV1cHlyMXN5eXRFRmNG - WXBHZDlWZnJaaWc4K1hqTnA1S2RNcmFHUUhjCmE0a25MdWU3NHdDZDlGWmNSeFQ3 - NmRoelpvMHAzTFVMZVRiUU9tdVV2MUEKLS0tIHIxanZUS1lMTjNmeXRmWXJOeXhp - RzZUalZ3cUlOM25uZ2VncXUxUFpvK0kK5V/OT3GDx6eh/tK/CWoVsA+itGqHoRmZ - 0V0tJHDxnDqk6ANtNlhWXe8++BQowYg4c5e5i6kwQvN4KdixzfAycA== - -----END AGE ENCRYPTED FILE----- - recipient: age1gkzp905yqkla54l52m4xkqtxpn0sndkx0vh6qqa8d2tu29x8f35q354gpe - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvSFFiNG5nNGpUZWdSdXBM - UVVJdzY3OFpwQnZXS2o1QlNJaVlHT2d5c1JnCnpYVjZuNHhFVGZkQllEQ2tSQ0Fp - SEVNWFpuOXh2c3dKTG9NOWlieEkzdkUKLS0tIGZDekJDUVdIWTBJS21iQ2l4a3VO - K0dyV3NKYmhwL3h5SWRNeWRpWnZOT1kKJ7mzZHmd8G4cK/HkIhl198SWIBrlE2TD - wOCtP24QLrtlGhOvGykh5eMVi/pOsGKci3xiqjDgB0qVhjQtFdkUrA== - -----END AGE ENCRYPTED FILE----- - recipient: age1c4d93hmawmx8nt8g2sjrxcngfl7qx7y6vwxpqqg7grrkhjen6fvstljgg9 - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6cmx5Z0FTRERFekk4K1A3 - UUtRRW1PZzVlNUJYTGxIZmhaQUR6dXhuOTBBCllCUFJscFlJYlJ6OWRTTUZyMlhi - NXhPM28vbUdxcVc5MjZ5d2d0cS9jM00KLS0tIGNrSERHZVBBWTVJeXBiKzJWRkRh - bWwwZHFaQmxSWGNNeDRzZHhDUXZ1ZTQKxVMOg3oY9mZORVYNqmWc2AD2K0kvSnBx - q8bnBfe2+G5hgzVwqyaMu7J4uObpj2G5YDqhph4/r+eiuUlnovALQQ== - -----END AGE ENCRYPTED FILE----- - recipient: age15jjykch8km3l8atssu0n9us6d2xg58z0ds9s0djtdh9l954sud5szqxv29 - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHOW4vWHdxVHptL3FINmlo - RGJYbS82SVdUTkZGWGtrVk9iSWlobFpaWWpFCk16cGszbmphbzVKL3IvQUI2dTR2 - QXBrU2tYcGoxQXlpSGdmNGJlZzJGdWMKLS0tIDY0REhkN0VyV0hHZndBbWpmK1N0 - M3ZnU051NjFDaHQvTmFEOGNzejVpZ28KdGASTUh0s3pew+7BIQnoqUX9DRcpCKqt - WpftbkQfRX8q71CiI39PCMOHdNVDYMkNTywhGRM8DLo+KEsq//0mzA== - -----END AGE ENCRYPTED FILE----- - recipient: age10jhawn266e3wr6rx0lndkl9a47ewtk6jgh35d2582uu2l7dtn4tqdqc29c - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjdkYyN0pOSUNyV2RERERS - ZmlqemdJVUE3WE1Wek5BODlZclFHRUdReVUwCnpIR0tRL3AxUTJYZkVjd1RsOU1F - NkdDb0pYNkpoV1BKV3BUbTh4VGhwNkEKLS0tIGtNajI2TUwyYks1TGVFSGl5Sjc2 - cm5QQmNySFZXSG9BNVNCSDFIcE5GalEKyYmDdATQX1RJ8xA7CXwlxnO0RXAk9xCX - M8E1APDhak1EPlvIA6gQGzI1jajSksW5BDljceP+dEPc3ODMkiR1SA== - -----END AGE ENCRYPTED FILE----- - recipient: age1x708x83pjj7urp26pncx67fqz8a3htrf0umw7c00pvmxhl6y95lszjgd6r - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrVjNxUEwwcGx2RjA1bVhk - UEN5cm1rUkpwTEozaEd0SVVSV05MQ2NxbTJ3CnhoSnBVeFRzMVF4YjFZT1ZidEJP - eEltM3ZXNHhsN0pEVlcxNHFGRkdPS0UKLS0tIDJNdFArVVFNd0gvbStVTGsweEww - TW5VZytXODN1NWtsRXhYUjZSSjNvU2MKDA622ouqChH+p/62dXQdWNZxkfMcei0i - xdGi39zFFvsoB8B1SvIToxCtPtBVNKAhFfZhKWf8mbrlccX0Njco1Q== - -----END AGE ENCRYPTED FILE----- - recipient: age12yvljlgg94z8qfwyezz6mtmrpldxvfcqwzsuyfekszu296fg6upseeyc0t - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKc2I3OEZiSlJMQ2N3a1dj - SFNWUzhrVWsvSXV0Q09vYVdNbTU2amJ2TUJ3ClFlZWR4U1Q2eTRBZUhGeWpaNVpF - blJqbWt5TFlDZ0x3MWNJWXdJbERFencKLS0tIElIOUR3MytjK0hrNVFEbks4Y2J2 - TzFqbTlreUZSbTV2K3dLeXlZZzM3YVEK3GwcAJYIZVvNQvx4+SmZD9up6x6IEd2x - w5SBvMBc2+EBrtA/kXXmmQO1VEvUMup2evsVYEDTm4Zqxst3+dfxwA== - -----END AGE ENCRYPTED FILE----- - recipient: age10zakwy8z5448vj7ur2h7vn8wfzvt2nxwq4pk4wx6cs34mlg58yasdjhc7l - lastmodified: "2025-10-05T22:37:01Z" - mac: ENC[AES256_GCM,data:V6fpPK1P4Vqb/NLM4oZCOFnPDvxqkXhqFXJWG/3+bu/SGksn//ORDbyXs0tqIuzZKwJe/IFgvPMCZFEJhJleG8Iga9UTRq5TWjBqFkyOLiaUO5lMwzjGYYFflLM7TU+QRbxvHm2vzRpTQWTq4EbeCK9qa7HcBT0RxCZyJAr+Hvg=,iv:eouzeT1CoXVl3vG6g2GfV6fvEV2XZWzNepvm4iA7S3s=,tag:O/xIUUcI+K3NqBjKhBOVlw==,type:str] - unencrypted_suffix: _unencrypted - version: 3.10.2 diff --git a/modules/profiles/media-management/sonarr/default.nix b/modules/profiles/media-management/sonarr/default.nix index 3e86733..24edabf 100644 --- a/modules/profiles/media-management/sonarr/default.nix +++ b/modules/profiles/media-management/sonarr/default.nix @@ -1,12 +1,13 @@ -{ flake, config, ... }: { - imports = [ ./postgresql.nix ]; +{ + flake, + config, + profiles, + ... +}: +{ + imports = [ profiles.secrets.sonarr.default ] ++ [ ./postgresql.nix ]; sops = { - secrets.sonarr_api_key = { - sopsFile = ./secrets.yml; - format = "yaml"; - }; - templates."sonarr/config.xml" = { content = flake.lib.generators.toXML diff --git a/modules/profiles/media-management/sonarr/secrets.yml b/modules/profiles/media-management/sonarr/secrets.yml deleted file mode 100644 index f4170ef..0000000 --- a/modules/profiles/media-management/sonarr/secrets.yml +++ /dev/null @@ -1,97 +0,0 @@ -sonarr_api_key: ENC[AES256_GCM,data:bXXqe2Pp8b2gyccRl0NCLW0tpdqQV+7UM1MNEnMdiHw=,iv:tIO+Qd6PnSQDDhG2q92lMka40u6XZ8IddPqX13NRShw=,tag:TW7HPXrWZypLBYoBEzzcVg==,type:str] -sops: - age: - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqcVM5V1dmL2o1S2kwRFVq - RGV1NWhkd0VKcU1tNExVbXBqVDR6cG5EeVVFCmZBcFN0UGl3UnRNSXRIQ3JXdXZj - UnlqMHJQRlRJR0lRd0VaNFRmZGxwQzgKLS0tIG1QUzg2K2dQelc2aGo0eElEYzZy - T2tFSVExQmpFaUJNZnpqQ1lUMDAxK3MKIxU4qI7+IRG8OWiz1fp17tbBvU3L7Xyp - I0OW2W/Jsm4yex6Xu8GLyoar4S3pQ2vR8cGowZY7xEvcudHbWvQHsQ== - -----END AGE ENCRYPTED FILE----- - recipient: age10539mc6shf02hpa8huyjktdw3nfyavxdg8pt247wwvq4xrv8h5zs8nc0k0 - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzaTdZTXcrOU9uZGFRcHFt - SzJUTm1CY0NaakE3ZE0yZkI5V2Y1SE9jYUhJCmhNT29heWdrQk44VnRWV3oyQUpl - WTcrS3BxT3EzTnNSRk1aWkdYSFhycU0KLS0tIFZBeHAvZDhzQW1ncmZLcWN4Zmgv - SXpIT0R0eStFa3lIbTJ3THNDdkFkVVUKqMmQIy2daqfpr4VzLGzff0uGXugkWTiP - jjy2yot2+crLJ8EWAPw/yHIP+f/wKbjgcRqApARbjPmQpTf+5cbxMw== - -----END AGE ENCRYPTED FILE----- - recipient: age1g22ghnrdg858yv6w2ux8hgntj8gkdyjn28axdkmzyx38d4vx6geqj4px9a - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByNWptR3ZuS283RXlwcThx - Nm5mVlpEUm0zMTFxdFk3QnRKR1VSTVpHV1ZjCk52L1pINnA3MDIzNG8vNUpaOGhF - SVQwUGRXRDdVSUJ1eXdJelVvMHZLUncKLS0tIG4rVlRSdHRHZlNhS21yUXZEdVIz - bDVnTG00SlEzcW14MVp3SzVYRUlOZ0EKUVSDFDs4BFpx/J7pld2FZ2phJf6Cjfn1 - YjrGG7xQ79XRbBEf1UPZZF2SRHmTvCrotIhqMXE8Cvsvt1a3NOf1lQ== - -----END AGE ENCRYPTED FILE----- - recipient: age1k5nzxq4ej2u9ls97c2dhlz96j2vghv0assz5g0p4npzyc8c8fqlqld72hg - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwS0VBVWI1WkdVaE00RVVm - MDVNZXdzMlpuLzhOZnNTVXh4bXUzb0ZWOFU0CnRnemZudGpVRU9JWGZuNlRXRE9h - c0pzWkNNUU1CemU3K2F1TDJDWHM5alUKLS0tIG82dTFtODdTRk15SHovcG1rSy9Q - bHlXQlpoZWdKaW1ZUUhzbC9TeW9uNzAKIdHEBMlyH25fY1RE4bWVTpaagpvhdUjs - RS7fAUtunrrNggkc0Vk8cOsX5lwNfYSUTS/FbdM0JhL/BpnEEjg1Bw== - -----END AGE ENCRYPTED FILE----- - recipient: age1gkzp905yqkla54l52m4xkqtxpn0sndkx0vh6qqa8d2tu29x8f35q354gpe - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrb2dFQWhjeTZKaFF5R3lJ - endKaVd0WkNpS1lOd2dxUWF5QXRnei9ndWc0CmNpdTlNMVBBazdSWnBhOVR1RVo3 - OVlhUmJBVk9tV1AyWW84YmkzME01M3MKLS0tIDZpMnJxek5IVGVDVWVZMEpsQXRL - by9jVnZoVmIwRThjelJSL1dqdzEvdWMKPTWJwslYSLyxzqnqyx8QyqWnVqBcwwCy - aehETBR/0bXxxr5iDPOVJkcSmT4N7/ERG/5SaV8HDcmc5NpQWffhWA== - -----END AGE ENCRYPTED FILE----- - recipient: age1c4d93hmawmx8nt8g2sjrxcngfl7qx7y6vwxpqqg7grrkhjen6fvstljgg9 - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0WnhOTUFjeitoYWZzWXNu - K1hTeFp2cWVhOEUwVGFWN20yeFNTZENnd0dVCitpS1FFTitXZDJ5a013c2ZjMGJF - VmM4YThUOEdZdVNNdytwZGNtQ0JzdlEKLS0tIFg2TFYxZDg3c1BpOHdYczVieG5z - ZTl1Q0llNUs4bTJwVGg2Y3FDZnJoNDQKnh9ncJrVE0cQ4qf8rU6/8gEIcxOSeORv - rW06uzMZm36Xs4478ZX1836GyYrgS6EQT6GVENe2kqrX+Jynt6Y6lA== - -----END AGE ENCRYPTED FILE----- - recipient: age15jjykch8km3l8atssu0n9us6d2xg58z0ds9s0djtdh9l954sud5szqxv29 - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrZ3pTQmRGNGJ3bVZvVnZi - bHRKZFo3ZzQydXM5V3hyVjlzanBJMzFMM2dNCjl0dG5nQ2FhQXUzdW5hWjZIL2V2 - eHRheFpxczNnTjY5WGZVcGs2NFBRdDQKLS0tIFUycXc0L3BJUEg2cWRkVzI5ZXli - b2FpM1hEVlB3WEN1TkxQckc4MlA1Ym8KJacaaL1pwnHqJsNmBKsVbw21A0clk/58 - H3xvyh13d5Ba4Ah1C0+ZYld+bMkvq5sRyvo5GtPYfs8lNoxpaACYUA== - -----END AGE ENCRYPTED FILE----- - recipient: age10jhawn266e3wr6rx0lndkl9a47ewtk6jgh35d2582uu2l7dtn4tqdqc29c - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvR0htN2xGTjFrb3JKOW56 - MFU5WnM0Q3NNWDZqT29CY0tVQVZoRnlLMFZBCi9XbDRpNjBZU0daOTdONVhUSEcv - TG43RUpvZWNDdFBoRXlRRThXdnNiY1UKLS0tIFlRb3dBSHovTUFhZnQ1UGN6dFIz - emphalY3K3MrTDhOU250Y2RIdkJhZ2cKWoMa4pJcOza1arH5nc7ohpUg+aB2NnJa - +gBtdFoZDGe43N6G9JGXp8VPXreyGMW76DTi71Ye08kgYWumrOMr7g== - -----END AGE ENCRYPTED FILE----- - recipient: age1x708x83pjj7urp26pncx67fqz8a3htrf0umw7c00pvmxhl6y95lszjgd6r - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5dXFVbU1KTkRZb2w3d0xG - dC92bFNEaHpSTFZwRFRtRHZwRTdDdDVwV2tFCjlHZktJazBjanByN1pudXlTQmpl - TTVsSGVZckFDbklkMGdPVndjeFg2dzgKLS0tIGFzV01XN2NIbER6SDV4Q2VKclVF - T1hDMDlMUWU1eDNHU1hNelpzUi8wNmMKngwRuJgO7Mvyo5gzuxXFAPvixtzuRZWy - 9ywKhWDBQ77EVQ5/N0F3FJo6sBSiIJTMTZPdFgABYmHS/WmrpF9mwQ== - -----END AGE ENCRYPTED FILE----- - recipient: age12yvljlgg94z8qfwyezz6mtmrpldxvfcqwzsuyfekszu296fg6upseeyc0t - - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGZGVxZDNlMm9uR3FxY1M2 - dmdwcEJKZDlVY0hXTWF5bHhQaHI0TU5kcXpJCmY2STIwdkU5eDBVL0hQSjFidXlQ - NEo5MG9UcndmYnhzZ0NoWUdYNGpTZ3MKLS0tIGlleElYZnc1cHYxK1BmVnN5dlpk - N014Q0k0cWwrV2lTdm85NU5UR0hyVUkKQ5cs3/q8I0q5C7DZDI9uNNnk71XPNgCu - HTJt9nQnZWpTkvWU9ii/R8LpVNtna+z+h0RKYOVuz/hPzwTflmlMTg== - -----END AGE ENCRYPTED FILE----- - recipient: age10zakwy8z5448vj7ur2h7vn8wfzvt2nxwq4pk4wx6cs34mlg58yasdjhc7l - lastmodified: "2025-10-06T03:27:45Z" - mac: ENC[AES256_GCM,data:7HyDsjYKX82fWy7SfwrrvxnF5RktZzrlCC7SaEt1yZURRPdtre4gJudLWFgwsBAf0dgLGKoTu3Ycz74xYC94jjFXJR6d9AHVU5eVA9vLZB3FJwE4LQ8JxoGaHPlS0FjMwS/QzyPGXSiPPUsymdW1a9A+Iht2wCw3u/NF3sNLMMs=,iv:TSJLju34u/V+AYZuuBlIdKw9oZvCsIMUglviorDdaAw=,tag:l42MRcF9ZyScUesVoaupKw==,type:str] - unencrypted_suffix: _unencrypted - version: 3.10.2 diff --git a/modules/profiles/secrets/radarr/default.nix b/modules/profiles/secrets/radarr/default.nix new file mode 100644 index 0000000..62898c0 --- /dev/null +++ b/modules/profiles/secrets/radarr/default.nix @@ -0,0 +1,7 @@ +{ + sops.secrets = { + radarr_api_key = { + sopsFile = ./secrets.json; + }; + }; +} diff --git a/modules/profiles/secrets/radarr/secrets.json b/modules/profiles/secrets/radarr/secrets.json new file mode 100644 index 0000000..49b1cdf --- /dev/null +++ b/modules/profiles/secrets/radarr/secrets.json @@ -0,0 +1,51 @@ +{ + "radarr_api_key": "ENC[AES256_GCM,data:CsZ1J6xKkh2dKsDF68mwFILTyZb/cuWuwx1zrU8fm8k=,iv:g18KXax5lVoK1Vv0bI5k4AzMZv+eFWj3pcLp/jGvN54=,tag:PerRWQeY2CB95o023tSjhA==,type:str]", + "sops": { + "age": [ + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtelFlWTkrM1puSmtXVnhq\nR1psN08ydDdSdzVQRkpSa3pBYkI5MlFKazFzCkkvRzZWRGJXdS83alVyMlowODha\naUlFUENRbExHeFIrM3k4UjYyZVlRUU0KLS0tIDhjVFN5bnFoM1pwN3ZyZUd3K0hz\nSnNHRk8xTGhxQ25HQWJKelZVS2twdFkKwJprDNpzZmsFh58P2u6vI7ri+5DnkSZ4\nfzzWnDS/nVHC6Ejgngw3kDZQXaKLMrUIvSTuCh/HYdRl4JnrVtUG3A==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age10539mc6shf02hpa8huyjktdw3nfyavxdg8pt247wwvq4xrv8h5zs8nc0k0" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlcGhhQ3JUeEhqTGhCZmFF\nLytseEF6VmhacXlPcFpCTjVaTkxvODNKY1RJCjB1S3JmU1RDdkpubWJhWWpOc2dz\nb0FBbk5icFlkL0NXSVNPTmgrcnFIb1kKLS0tIFk5Z0Q2VngwOU43ZlByRVEwNmdm\neUNsSFNXSHN2NnV4T3F2bjZxWGFpSjAKvXPx/7RiBWdgG4BpvyD8zPNuZIa9VtJ1\nBK/7t6UKiB6pDKP/Gf2M87FWaGgRdJpzhqzcChRAAp0M3Ap8V6c+rQ==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1g22ghnrdg858yv6w2ux8hgntj8gkdyjn28axdkmzyx38d4vx6geqj4px9a" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsUGxkd1RJd1BHOUdaS0hy\nbkZpRDA1cjd3bXVNQXQzbE5EaFcvb2dNK1JrCitXcDlQQnpVcUxwbnhCN0pweG4x\nMG5vN0JkUEZFZktTek1NT1N4YjllWGMKLS0tIC81T0ZnalVyZ2RUemQwRGI0bGI2\nQW5ETGhLVUlWUkhuT2ZpamRUeHRoNHMKLekFurDGsX7adhGeekhecEMpVzs3J3n0\nLVl578x4JfGPptDX/5laWvuuu3wEijpJGLaaNzk3JIY7WIztP61mJA==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1k5nzxq4ej2u9ls97c2dhlz96j2vghv0assz5g0p4npzyc8c8fqlqld72hg" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmNnN2SzBVR2FZdm1paHpl\nWkdHa2ozWHB3SGZCQ0l4V3h6RUxHejZLZEZ3CkkzMnR5WjBHYTZSNjN4Z0NlazVV\nWFJtaFFZem1Hd1RYTGc1SVZFWnRvME0KLS0tIDZSalQwYUZvT3RvaFk2U0VZWG9o\nbzBqU3hQd2dRaFplRFVlSlhhK0g4ME0K/beYca+bcyRBPvTFkFqKX7FoPZcdsicO\ne83G284OPbc2jdLUoG4v4PXL1HM4683/44ZvdHXjlgq2MN0AX6llIA==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1gkzp905yqkla54l52m4xkqtxpn0sndkx0vh6qqa8d2tu29x8f35q354gpe" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKRksxdkZtMmV3UUZXVXQz\nOEdjMEpzNVRzRTRUNzd2eHR0STRvVkdjNHpBCkIrMlNiY3hBaWJOU2M0VCtkTFdV\nMUpOZDVidFErdFg4cnRGWjBvRzFrWm8KLS0tIDc5ODRaR2NjMVkxaUJBZUJPSEha\ndmRER3JJVVVIN0l5VzdtK3NuTEZIZjQKwjLVt5IdafrojxYe2Qr+tTTxCkM8/hvj\n578NWWTQ8heFjbWcPj3u8MbM1J96A0gzCVeUw3FXbh8SE+5iGZCy2w==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1c4d93hmawmx8nt8g2sjrxcngfl7qx7y6vwxpqqg7grrkhjen6fvstljgg9" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIUTRtelJIUVlaMk1oMFRm\nRHJCUUIwaHpwWGUxZWJjNEFpTFVGWGZrUlFnCmppVWFGcTF1dnk5bkJDWHM5NWlY\nU0NBSy9raUhDcDhHblJzcE54Znp5UHMKLS0tIEh4YVg3N2xTM01sT2k5VU1ENjlM\nWWRISWQxSWlqWDZRcEN2MVJIVTErM3MKIY2xFXkPUu+YxnU8LdrhId6+1W2DD2/0\nieU1aydd9byYzqg3FDi8clgjxMMA1XnCDbXmOF//sI9CMSuadwf1Ww==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age15jjykch8km3l8atssu0n9us6d2xg58z0ds9s0djtdh9l954sud5szqxv29" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpYW5hcEpFeVlrUURGVXZF\nT3JsbmJqZTM2eEFCU0t0TEk2MXV0S3A3UkFjCmwrSGhTQnBNUlpTRWVleVRNRnNK\nbkxkVVVPR2sraHlyaCtXQVVPbldYcU0KLS0tIDRTQ1VneTlYVTgrQnhQSjZQYmVQ\nWFZHb2RZUDYvNDBxYVFjWStoeHpoUVUKR6vJ6bneFXNvGqRB++iJmygXJriiLy7F\n05505Xv1pqqv3VmqV68wWo5gWxeL/p71cv1m/Vhq0CIto+ki4RlN6Q==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age10jhawn266e3wr6rx0lndkl9a47ewtk6jgh35d2582uu2l7dtn4tqdqc29c" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoUzk1N2o5N21sNEtsOUUx\nWHV1WEpiclF4NDNzWnBSbGZRei80dGhycXlZCmJVS0tJR3NCTXFubHFPZzhRbWVo\ncitxVXJQc2Y4d0cwcGhVaVF0YnZzOFkKLS0tIHJydWR4Y2htbHU0MDZpb2k0ZDFj\nd0UyYkRvM1IwNU5KbW52Q2NKK2E5QjAKi7jrGJqw3ipkc44ZpdyCoSIrxCgy1rki\nxXrF3pmVaFKmmHtfZWWhQ5cIXXCE997llB7Cy32HggoRSEtznwF1IA==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1x708x83pjj7urp26pncx67fqz8a3htrf0umw7c00pvmxhl6y95lszjgd6r" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtNTFOVkd1YU1DTHpWK2U4\nQzlmaGlKZ2gzMmJVRFRKcDNrZG0wSW5YdzBvCkdMZmNXQUtBQnVob29PMU9GUVJt\nQndkcy9Hd1pxcC9mSXpJUUJ1TkNrQlkKLS0tIG9OcVM5andDTWplUjI4TmpOdEFm\nL1JSQm42eFVWNnRob281N1ZYWXowQkEKHG8ITBsN2cbL6dHyZaSWUl5STmaB42bK\nGGACA0TwqNTkyzE7doY5W2D/vDA3DHwo0xNO+j264aQwKGzDqpRXWA==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age12yvljlgg94z8qfwyezz6mtmrpldxvfcqwzsuyfekszu296fg6upseeyc0t" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCUTY2REVVMGpEWFFnTXJt\nMXowMEIvSWwxNGx0WXBTY3Axb3k0cFcyMkE4Cmx1NmJmY2F2cVV2RGJZVHRsQW1J\nczdBQ2RoT0tnMGdWYllIRFc3ZnlGS2cKLS0tIHBLdkZtNXhPWG5odm1JMjVXS3NB\nUUdBY3NhS1lPOVJNd1NvM3ZsT0kvUmcK38c8EjZ3Gy8qcFi4HdcOrrMI6GMb8QXH\nmmJcVAiV33F0zBRdAIcdDK6iPbawNsaTn83bjma2V7tNgKh+P1VqFA==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age10zakwy8z5448vj7ur2h7vn8wfzvt2nxwq4pk4wx6cs34mlg58yasdjhc7l" + } + ], + "lastmodified": "2026-08-01T03:28:11Z", + "mac": "ENC[AES256_GCM,data:NNhFWhwngriMd9HJheFXYqQEq8fn24LAlrPu5cVhUrYDBuTJZI0KwXgmqxqPnkSeYN+v8ejL+QvE1/+VXKzg7T6qLp4yU4UMy+buzLRLVch9mKNtRext0pCcR/orK8vc0Yn9eOzqwPr3zhjXcrHLerHJoRkqoAyhUAImMg4kWtc=,iv:x/h0+5uo9s0p+X7UR2Zpq3Oc/movrWrPd2934LedhwU=,tag:r4hglM2RZy+zcrWNCAVlbA==,type:str]", + "unencrypted_suffix": "_unencrypted", + "version": "3.13.2" + } +} diff --git a/modules/profiles/secrets/sonarr/default.nix b/modules/profiles/secrets/sonarr/default.nix new file mode 100644 index 0000000..2f3c91b --- /dev/null +++ b/modules/profiles/secrets/sonarr/default.nix @@ -0,0 +1,7 @@ +{ + sops.secrets = { + sonarr_api_key = { + sopsFile = ./secrets.json; + }; + }; +} diff --git a/modules/profiles/secrets/sonarr/secrets.json b/modules/profiles/secrets/sonarr/secrets.json new file mode 100644 index 0000000..4532eae --- /dev/null +++ b/modules/profiles/secrets/sonarr/secrets.json @@ -0,0 +1,51 @@ +{ + "sonarr_api_key": "ENC[AES256_GCM,data:uLJx9MvKtxHjsi9CQWB5wp+U7HcjthakZwIZrmM04xI=,iv:VvMk4dYbaQ6wXu/D2o1wq3qr8yYNoecgHC9vVYOVMQQ=,tag:pvQxekgU5zvpTrllQbWDUA==,type:str]", + "sops": { + "age": [ + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0TkFRNXRIcHg4aFFSWExF\nOVM1WFBqcnlHMEFpTXJsbWJoRE9ZRUJCRjFBCnkvS1M5K0h6RVlBR2p3dWRaWk1t\nUW1UM21UdkNkS3gzcHRPczYyaURUNzQKLS0tIENPK3RIc2lTYW90MzFNeEJhVGlv\nU2F2NUdIZnQ2eC9PQjZkQjdNTGlYYlkK83vIlShZcXRwMv27qAy+L4feHOnjrtC2\n4F45CXugXiYQo6G7eUoXZAaj/yQqyKq8cUxT71M+gA4DmZpZ3HjNBQ==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age10539mc6shf02hpa8huyjktdw3nfyavxdg8pt247wwvq4xrv8h5zs8nc0k0" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEWWpNMFhrZmxJNVpqZUVM\nenNHWWZqTDFIY1oyenZKZXVzc2dnZzFMTzFJCjVTMTRRY0xCc1hJekFYZ21LSGVo\nejNSQm9vOVhSMTA1ZnBVbjlpYUc0aGMKLS0tIGwrT0Q3THZGZTMrZWpVbEVmOHVZ\nWTI5UkdoM3V6L1puNFhGU0ZLTHhsMVUKYQ1r1QPYqIvatzkkJ7M+TIeTkeiFel7p\nZP4Ug0ArC1Zvn22RpT5I2C6BCICv4PiPHUcypxVr2XQDyVbu+LJKxQ==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1g22ghnrdg858yv6w2ux8hgntj8gkdyjn28axdkmzyx38d4vx6geqj4px9a" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYbm4ycktrTDVjd0R6eUNy\nUERqVWQrV2F0Myt0MTJ3WXFWUVdHajl5OXdBCkVVSHNxNy9BMjJrMXdHOUI3RzYr\nbDg1OTFZZFZ3MCtmaFFqdExHN1RobjgKLS0tIDhyVlBEeE1VV3BYRS9IY1pPR0Ur\neG03UlkxNVdrbE9tYml0RHVIYnZFdkUKTfV2KjvcKmeTGfhFaZQ8/eXl4tri2E34\ni4UImKlOK6uPhFRX5zgIm8zybWqFKthVcpf5j70MB23AMuLuFAUByw==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1k5nzxq4ej2u9ls97c2dhlz96j2vghv0assz5g0p4npzyc8c8fqlqld72hg" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwZnZyWTBPeFhITkhsdFJ5\nODJNSE1HVW1PcDRBS2NadlljNlN2SnM0SUJZClJGajVaRGxDQUdvSjU4cFhxQ09E\nNWRyNm9GRC9vTXo4bFFyYVBsU1RQSlkKLS0tIDNXR25ZQW12S1NzTXN5Y0MrMlhG\neHJhQ1lMeHlTbDZiaFBXVXA4bjYrd2sKzpZYlYxzdEwuWx+/5NRC2nK7zrG8rzV5\nMSiGru27bzDHOEND3QuP4opto51/QDW1jx8XJ4iqKiSMAGY+NuUJvw==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1gkzp905yqkla54l52m4xkqtxpn0sndkx0vh6qqa8d2tu29x8f35q354gpe" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxbDB1OFgrQ1dUWVkrZWkx\naUZGYW1iV0dRL0F2T1hHMFdsYmxpVEsvaHhvCmVEQll6U2FqazNXbWdsSDhjdVRC\nOExXelhINzFQQlN0a1pWKzFiaHFGMVUKLS0tIGc0RElsc3l4bUVBbzhjWTRHNUlK\nTlpzMTliNGNkY3F4aUVwaEVTd1BCTUkKEkkwfVtcSgEJB3u/DDQ+KhH9vd4hVMbD\nSTtrZWQtX4xrw229JquCt8m5fwOuakmUl0VpoeUe5QiCdGdEZqKdnA==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1c4d93hmawmx8nt8g2sjrxcngfl7qx7y6vwxpqqg7grrkhjen6fvstljgg9" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmcTVQRTM0am9OWDhHcG5T\ndmZPc3AwNW1keG90ZTVZTmoyanhVampVOWtNClh5dGtQTXdjWDhZTDRmdkM2eVQ2\ndUF3NEphWHBzL1dsTG40WFpLQllMMk0KLS0tIFBHcS9OTytpTmtEWnVGZUMxaGVt\ncDY1MlZCZ3JYVDdQVzJ4cDZlNDkrbU0Kz1Yd1ph00WqU997XEMflmR2WzcJ9K+xi\nS41nUPR0E0STI+tjhyMQmFlTTL1uqx0vm70qzd0FI9cXLFSt1sT/nw==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age15jjykch8km3l8atssu0n9us6d2xg58z0ds9s0djtdh9l954sud5szqxv29" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3b2MvWWRuMzZLbjRadkdM\neUlMUkM2TEEwVjd2dDZsTnlERVYyQjdpUGc0Ck1WTlNxQ1JCV3RnS1h6cW9ZaGZK\nbFJFanlCYnZrQjhBdUh2YUM4d1pvdm8KLS0tIGZ4L01WUE9KS1N1TFRKc0ZBcnFW\nSGRIQ3U1dnZoQTc4Zno5UVV0WWhnWHMK05q15jTdBxMMoyoNqrNqyJT0bIodtvnX\ni6WFLjATJo+36y8KYMrG5C53vrAQCCr+PXVZBLYplvZJNBQO2ZeweQ==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age10jhawn266e3wr6rx0lndkl9a47ewtk6jgh35d2582uu2l7dtn4tqdqc29c" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1YzZyTG5KS254OE13S1Bi\ndk03Qno3RFVRcWQ0QkcveUdEbFpQWElCT1IwCitUMTFxck5LR0NQcnZ1Q0trTFJZ\nR01LbytnbXd3dFN1c2tnZDdyTTV4bkUKLS0tIDBYWEg0bmNJbjBwTDB6TW04MEYr\nUUx2Q1RGbWxDeXZ5Z3NwUnNWdGlaSjAKmsNjbFQeToqr5fz98UUKYy+Wz3c3kJF8\n2Jik1J/PTq7C0sa2R32XcjzyPBsdaNtkVbZTBsrqwIqVuUSpM049sg==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age1x708x83pjj7urp26pncx67fqz8a3htrf0umw7c00pvmxhl6y95lszjgd6r" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvem9tYUdCR0FEMmFtNjJL\nRmcveDlKQTNqZ2NRY3U2LzBQZDZyVWlTWlRRCnlyVURuYnVzOWp4L0lqUjlRNFA5\nYTVoR3YxNjA2QWo2Q05zQzFHUjBnMWcKLS0tIEZPS3NDeWJ0QktGM2tsTmdjY2Q5\nZVdhWVRKL3RoNmdXWmlBMXg5eHhac1UKyMw6xCeDrkeIQ2y6NoSneNqz8rtQglvA\neb/k7Hw+Gl3WgqpQjRhGMC06wC9WK3Mmm7IDtjKVZTrnfpzD4k+GQA==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age12yvljlgg94z8qfwyezz6mtmrpldxvfcqwzsuyfekszu296fg6upseeyc0t" + }, + { + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnU3FwWENIMlZyVDN6RE9N\nMjVDQ20wR2p6OEViYW02cXU2dHYxZDNZa1VZCjJ1c3VnanNQUnh4QWlIemJKWjlr\naHNhSTVTYjVwaWl3U1lwWG1HRGNGTDgKLS0tIHQ4TmpLdnc5WmMwSnE4V0ZLWlg5\nK25XcGpHcHY5SlN6NTJIQUpQQUlEVGMKYU7/YR+IGd3Fi88dR2y/0afNiJzkAHw1\nKY3y+36jo2WnkSUsjpFPKIWReDwVlJ0dPx1u6Ldub2SOZrLnZpwzBw==\n-----END AGE ENCRYPTED FILE-----\n", + "recipient": "age10zakwy8z5448vj7ur2h7vn8wfzvt2nxwq4pk4wx6cs34mlg58yasdjhc7l" + } + ], + "lastmodified": "2026-08-01T03:27:49Z", + "mac": "ENC[AES256_GCM,data:XTVDq7v+wadX4s/W26ye/Hvr/BxayY1z9YXhbV/HcBy3F+I9dPvZpIxm/xKTCpwaEhSwrtKlKjyVoH7FnncABq9W/bT1qmKUpe/AB35vMcjcAJrAu8EKTfX8aB+D/2JSACIYd9ACt9gk9E9sAl3tLBlkoZ5q2PPycl6qonwK4+s=,iv:bpH3UR2DhFW6oYSehGZL5z7ugX49RxlhfEXWBEEjYzE=,tag:MDTi2Qn6fSTLYBe0TTnhbg==,type:str]", + "unencrypted_suffix": "_unencrypted", + "version": "3.13.2" + } +}