sops: introduce sops-nix (age), ssh keys from encrypted tarball, .example secrets

This commit is contained in:
Sergei Poljanski 2026-07-14 12:24:21 +04:00
commit a7ec82579c
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
9 changed files with 149 additions and 7 deletions

12
secrets/wg0.conf.example Normal file
View file

@ -0,0 +1,12 @@
# wg-quick config, sops-encrypted whole-file (format = "binary").
# Same format for wg2.conf. Encrypt with: sops -e -i secrets/wg0.conf
[Interface]
PrivateKey = <client-private-key>
Address = 10.20.0.2/24
DNS = 10.20.0.1
[Peer]
PublicKey = <server-public-key>
AllowedIPs = 10.20.0.0/24
Endpoint = 198.51.100.7:51820
PersistentKeepalive = 25