evan/nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: rotate mac-va-mbp-work sops key and clean up unused packages

Browse Source 
- Rotate age key for mac-va-mbp-work in .sops.yaml
- Re-encrypt secrets/common/evanreichard.yaml with new key
- Remove opencode, docker, and nunc from work mac config
This commit is contained in:
Evan Reichard
2026-04-27 12:44:52 -04:00
parent f110a9743a
commit f349b24b5d
3 changed files with 37 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.sops.yaml
View File

@@ -9,7 +9,7 @@ keys:
- &user_lin-va-terminal age1w6avj7gd4f5frk90lsyh4e2k5am6z92hzlr0vpgrm767muyj59qsnuah62 - &user_lin-va-terminal age1w6avj7gd4f5frk90lsyh4e2k5am6z92hzlr0vpgrm767muyj59qsnuah62
- &user_lin-va-thinkpad age1avlhszrryt4gf4ya536jhzm7qwt9xfttm8x4sns6h9w2tahzqp8sspz9y5 - &user_lin-va-thinkpad age1avlhszrryt4gf4ya536jhzm7qwt9xfttm8x4sns6h9w2tahzqp8sspz9y5
- &user_mac-va-mbp-personal age1dccte7xtwswgef089nd80dutp96xnezx5lrqnneh9cusegsnda8sj3dj6c - &user_mac-va-mbp-personal age1dccte7xtwswgef089nd80dutp96xnezx5lrqnneh9cusegsnda8sj3dj6c
- &user_mac-va-mbp-work age1jf7yuycuajc5m8vupgrndjvw8knekr2v9979j68xc5ykvcxag4lss454au - &user_mac-va-mbp-work age1ped3hpugq06908ex8kgama33qckqe03rmac5pa6th87vks5d249qhshvqu
# System SSH Derived # System SSH Derived
- &system_lin-va-desktop age1mxjrvjxkn69kfn2np3wpd73g44fuhsgykw7l5ss9rx30em5jfp2scnrq32 - &system_lin-va-desktop age1mxjrvjxkn69kfn2np3wpd73g44fuhsgykw7l5ss9rx30em5jfp2scnrq32

4
homes/aarch64-darwin/evanreichard@mac-va-mbp-work/default.nix
View File

@@ -34,14 +34,12 @@ in
git = enabled; git = enabled;
k9s = enabled; k9s = enabled;
nvim = enabled; nvim = enabled;
opencode = enabled;
pi = enabled; pi = enabled;
zk = enabled; zk = enabled;
}; };
}; };
services = { services = {
# nunc = enabled;
sketchybar = enabled; sketchybar = enabled;
}; };
@@ -54,8 +52,6 @@ in
programs.jq = enabled; programs.jq = enabled;
programs.pandoc = enabled; programs.pandoc = enabled;
home.packages = with pkgs; [ home.packages = with pkgs; [
# colima
docker
keycastr keycastr
reichard.slack-cli reichard.slack-cli
_1password-cli _1password-cli

72
secrets/common/evanreichard.yaml
View File

@@ -6,65 +6,65 @@ sops:
- recipient: age1sac93wpnjcv62s7583jv6a4yspndh6k0r25g3qx3k7gq748uvafst6nz4w - recipient: age1sac93wpnjcv62s7583jv6a4yspndh6k0r25g3qx3k7gq748uvafst6nz4w
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4RW8wUXQ3ajVMNmdmalN5 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrY0pseTB5R290aXAzdnB3
R2dPaG5YWndsTG1VTys0SDROd3ZTbzFQSlFjCkh5ckdienBGa3gwUlJUUXhPeitQ aTVMS2tBdnEvSjR5K241dElEa1Z1Tmt2a0ZJCnRSbVBsZ3lNVlNzdnFlY3VvaWpB
aXhFRDMrT2MzQVZNWFdic2ZpVXgwTGMKLS0tIEZHWnZBZEVvUks3ankxck93eHV3 aTd1ODFianpQR3RSMlk0Qk1IRE1jYlkKLS0tIENzVGgyUUFBcloweFdOMlE5cGNn
aTJENG5McjU5bVdNR2wxYXF2RWkrajQKwjSqh/q4idZxF46ePptixc1GTDC5sYit S3hOa3p1MHVLek5zaUxhWXFiV2Z3R0UKxSrnYSoN6KcuFdg5K6qwcwh9/j9lI0HB
A5s9c9dB6TsE+BIH8+EqHTDhsiUMyZhbXvqrzddg8mDDYBN1WFSKCQ== HqujumuIfWkcctNk38AMn4beeesmXsbJQcUPHUVOZQw6Ov4jXaGz/Q==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age17ayje4uv2mhwehhp9jr3u9l0ds07396kt7ef40sufx89vm7cgfjq6d5d4y - recipient: age17ayje4uv2mhwehhp9jr3u9l0ds07396kt7ef40sufx89vm7cgfjq6d5d4y
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmbUN0bG9nOTk5NXY0QzA5 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMazJ5VmNXQ2FRYzFuejBU
dFNQZjBCYkcyMVFEU3hBSkc4ZW1KVTM4UkZZClM4TFlxWmtMdlMzSGFYODk3SWFI bWNPWnI2a2R3NVBpY0Y2N0lXd1RXbUdmTkc0ClZDTSs4bklpeVEyMDNrVXJXRHRF
MGtWalhlTGNpYlFLZWduWWlEem13K1kKLS0tICt4VzkwdDQxTXJHMldTYUxadTJZ UjIvRnd3VnFtbi9TMjVvd3UybTEvakEKLS0tIHpoRGtZb2VyUkJkd3hWcnZNWlln
eS9UUGE4Mmt5UEFXZDRmVUVYQ3Qva28Ka1twYxCg+87wO72vdJqeGCDKuS2gQimh a3dPbEZtL0tsOWpWSEtPblZSYk9NVTgKM6TfK7VX6v059FXpRjpAlgX+ab4f6vq2
sIqpjaKozKE60nyCwlOEVuiNd6IIYWV5EIvAPkT94HpxdNpIYEh8AA== jH8jyO33YxQYI1kSgXJ5AR8evCoV3FzbZ5rzIy2PRmCOwFV8Im2bRg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1mar507c9mxmwalg486chs5kfh0mya38rv5w64ypfwnwlawewrpnswerpg8 - recipient: age1mar507c9mxmwalg486chs5kfh0mya38rv5w64ypfwnwlawewrpnswerpg8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuVFUzTHVRMUFMSERZQU1v YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4S0NrbGF4WXN5KzY4S0lt
dUZ4UVE3eWpocnNZaDFEUWlPN3hpdU40UlRJCkFJQWxxK2dWNVFUc2VrREh6c2V2 ZW1PMWE5NUF6NEIyWmp6RWY4MzNYbE0wQnpFCkdOaGtIWmtJT08zNmZNNzcvQldp
UVpvRmZjL3luWlNHaXRsRVdaakNNeGMKLS0tIHJtcXQ3N1ZaMWJPcHJHN0xVV09z bDFzdUcrRjcvaWdhWENGTlFPSUdWTkEKLS0tIENJeWRKenY1SVBpYXNwck5TSUwr
ZDFFbGxWK2hjdy9GbE8vbzYyU1JjVlUK7n70c8QFlGy89wCOfhNB37vpjRSZd3Ox VFJrQWNnNTJ4azVpMElHbmsrZnJPM2MKx/7XxkZfd1tPMck9FmoM6g28dp5JeXQ5
HuYtaqTdThVhmrEbWLoYp4NNAgLsfqIJq66VLAlSPM4AsZxmIoxVdg== OdiOLlKc2If1f6dLKkjDmmscMui6aLMQ8RJ8dLK7FKlYy+95VsHVrw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1w6avj7gd4f5frk90lsyh4e2k5am6z92hzlr0vpgrm767muyj59qsnuah62 - recipient: age1w6avj7gd4f5frk90lsyh4e2k5am6z92hzlr0vpgrm767muyj59qsnuah62
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWM2tKUDlIYnZGMkl1d21Z YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnZFpKSVpWMCt6Z3M5UGUz
WHgvN21uUW1DYXJFcEtTdzhXSkNkUllJVDI4Cnl5dVQ1ME1KMTRVQzVZaWNaWGhr YVI4TG85UVh1eXYwVStQWk5xdEhhSjdNTzFJCk1mNnBtSVV0VFB0TnFIeVdocWFP
YTdTaytHQytEZmJSdGV1K1I5b0tib1EKLS0tIDVvV3JxbXpQRHppdGt4Y3FhMVlU VzVKekdjUWYrbUVsRDJ3ZmdhaGhERDQKLS0tIE9rR3hpZmM2TWJDeEZxczlyRlFj
TFRjWmRiOWpuSWVibU5lcHdNaTVuN2MKzMcQLalX+2x1QaC8wx/JU8cG7UbjQyL1 MzNuSHlWWnNMYkJMMHZkcnh0cXZaREkKE+j0yWV/zK8lz8vRa0cywpLL2DiAFsgi
m6OglWqSf74HRP6wdqCmrblFn+XOYvDgDDW63XpA1O8XX0l2UrFa5Q== fgCdeysSacrQLxB8iBWbusJ31ktyJMYLrsWFAdPkl0WN6HjaR3k3CQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1avlhszrryt4gf4ya536jhzm7qwt9xfttm8x4sns6h9w2tahzqp8sspz9y5 - recipient: age1avlhszrryt4gf4ya536jhzm7qwt9xfttm8x4sns6h9w2tahzqp8sspz9y5
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3bkNSbW0xRm1vVU5vemxB YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDUFYyTzdpQlJ4VVJJbDF5
bjdkM1FSc0E3R0ROOFFKYVhLUjNyUE5MNzBFCkZ1ZTFiQVo0cU51SGFPM3RIUy92 cEhIQ1NSRVcwRUFBUzdaeXdkOWhPVjFIdGtBCk5qVmx1L09kVGhiNnlaQ0xoeTVz
OEd3VjFCY3V4NGs1MVlaT2RCbGFkZHcKLS0tIDduOUF0ZEQ0KzdmVFErMXJwWGp3 SEpTSjRLU2FkeGl5Q0hETStoR093VFEKLS0tIGIwblBVd2hKTGQyOENOMDR4Y1dP
ZVFHQkRjTnZ0REdVTllEbFUxdEVnbDgK8S8ge4P8+ZuSeH0uV5f0VqCFznmpTLDY VmFINkwvZEFuWnkyb2JpTCtmRUVBbUkKKzbifH6Ue84MkpaLHrwDvJu8uvjY7yOY
MHhgLOzPh5MSZbLAYRbg4oiABl9IRDfenKaKRUCNwbCMLP9ShitApg== +qYg0rOqFuZAx9YiOjDR7JVeGpfHM+7pO9ZjSNTPH0f1NC3XwsNp1A==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1dccte7xtwswgef089nd80dutp96xnezx5lrqnneh9cusegsnda8sj3dj6c - recipient: age1dccte7xtwswgef089nd80dutp96xnezx5lrqnneh9cusegsnda8sj3dj6c
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0RE5LTk1oK00zc3NQRHBM YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBSS9CQlE0azMwbFo4V0Ez
TFVFUkpndWFlcXY4aDl6TmxsVDF1RFJIVWtVCml1c1RkQ1Q0enh2UUczVGV0SDVh V3pKL2QvY0NNdmoxZXhQRUU1cG9Temk5M3pZCjBZUHJFRmZ1bTZzQ2RGU2F3WXF5
T1hEeWJ4bm41ZVFsVEVidDRScUJRMFEKLS0tIERJdVplM3NaMU5qN29lM05Pdyt3 UGpPMGc5SmdiamlOUmpuZ3QrTkhhd3MKLS0tIDlaOUNhcmE0eUFaYTNIWWFoRXFx
ZHBHTG45dFVuay9hZDJJcHJqcHdhS28KjNhABfWLMFeYQj6nEYz4YW82CDZiZqBy Zm1ReDlMWW8wak5Jb0VncFV2bFJROWsKWi9DTgveMgGG8eK4qNeAGGG/gfiJS96G
d0RSvF7QmcNwQ7iFIOFXsI2LXjMeSgsMPbTWHgAd0ZqoOPgPflRpOg== 232Tgf94Pb8eAU2zbF77pLWMaqTBbYPz1tggcMTfrAeDohq+/0sU8g==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1jf7yuycuajc5m8vupgrndjvw8knekr2v9979j68xc5ykvcxag4lss454au - recipient: age1ped3hpugq06908ex8kgama33qckqe03rmac5pa6th87vks5d249qhshvqu
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJbTZrd0RsbUVCS0RIZ1VR YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqS0p2TVhWd2VMQTNNR0or
ZXpBaXBoN0F0WTEyQXplR3JhT0xzVXBOREdVCjRBMVVUbFhDc3RHUGF3dHkvUGRX amhNdTh5bmY3WWh1QkgveWZEMEtxSCt3Tng4CnVEKzhDMFVzRktndmI5OFhSei94
amhLTkxaaUxhYmY2T2JzV0llMmtiak0KLS0tIDB0Mmp2VXZYMG5hN2duWUxYQ1oy dysxVnBUSXdnVDJOdHV1eFZDVzdXVlEKLS0tIDIwMnhyaUZPZWI2NnRmellnZjZI
dnRWdUp4T3p2aStvaUx0cThyR0lYMTgKPfUHzrM4/GLlpKELttmovv/iRCqi19tm TC91cmtZWm03dzYwS2E3dkorNkdFY2sKj5OZHOtKx1NGPSGKsWjC/8+seUAhvmxb
tClaoQW2TZQ9hyP1Jwq5ou/q8x4z4WEbC1PV6sMWruBxFYa1lLE1bA== wQ0iuPAq6yDLhYV69n7Jx4G9fKoidLIQxq+Ia+tLcYt58UDX7aixJQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-04-27T14:23:33Z" lastmodified: "2026-04-27T14:23:33Z"
mac: ENC[AES256_GCM,data:uGNqEv/jV7iH6weoeePcaVROBGaXiF9bSgvBUMsvJy9Npt2VYrDrK2ercH7umBpbIiMDQC91oTvfF8UfmeQw9REWuoxmAB9gAUObaqAx9W3mRDMckGzrm1QyzF4c51VDaB+Uxp/SINxlz7QFbKdwDrQKGjaF47oR7mNFJQG09qE=,iv:0H5YDvvA4asqn7CG4PzamI6ez49t/hCT71aeKmFBgGE=,tag:YOnBaZq2McVUarcJ+UEF4A==,type:str] mac: ENC[AES256_GCM,data:uGNqEv/jV7iH6weoeePcaVROBGaXiF9bSgvBUMsvJy9Npt2VYrDrK2ercH7umBpbIiMDQC91oTvfF8UfmeQw9REWuoxmAB9gAUObaqAx9W3mRDMckGzrm1QyzF4c51VDaB+Uxp/SINxlz7QFbKdwDrQKGjaF47oR7mNFJQG09qE=,iv:0H5YDvvA4asqn7CG4PzamI6ez49t/hCT71aeKmFBgGE=,tag:YOnBaZq2McVUarcJ+UEF4A==,type:str]