Update secrets

.sops.yaml

@@ -1,10 +1,16 @@
 keys:
   - &ereslibre age14tw3lf9mdn6dyxrxdsz9w96rp7g7qcdg04sqlmxzms0sjnkldvkq3jsz48
+  - &host-hulk age1znnnyj40897mtt8syaa6p7f0xsvatn0s3lsgr0u4r0st258tjcqqchv20l
   - &host-nuc-1 age1jsrzvlyj5fzf6c3rysd79f68drmpgvh4myxqsl7mlm7gyhfunywq573mss
   - &host-nuc-2 age1ph4vt4lhrw4q974gm2g0xue3y8swy8qw9k8kg68hzxs7s04cxyzs5jujvs
   - &host-nuc-3 age1jt7ucv03v82ccuwwhaulgywswsc5h2uxauyrdmra8gsd47ajfyasyp4r9q
   - &host-pi-desktop age1vlf2h45puhwd8zms7l0nnhk3m2w0l6meejhz8pdgduqw5ljleujqyp8l0h
 creation_rules:
+  - path_regex: hulk/secrets\.yaml$
+    key_groups:
+      - age:
+          - *ereslibre
+          - *host-hulk
   - path_regex: nuc-1/secrets\.yaml$
     key_groups:
       - age:

flake.nix

@@ -154,6 +154,7 @@
           modules = [
             home-manager.nixosModules.home-manager
             microvm.nixosModules.host
+            sops-nix.nixosModules.sops
             ./hulk/configuration.nix
           ];
         };

hulk/configuration.nix

@@ -19,6 +19,11 @@
 
   networking.hostName = "hulk";
 
+  sops.defaultSopsFile = ./secrets.yaml;
+  nix.extraOptions = ''
+    !include ${config.sops.secrets.github-pat.path}
+  '';
+
   # This value determines the NixOS release from which the default
   # settings for stateful data, like file locations and database versions
   # on your system were taken. It‘s perfectly fine and recommended to leave

hulk/secrets.yaml

@@ -0,0 +1,30 @@
+github-pat: ENC[AES256_GCM,data:o2E4Yv6BdndEGbbIrb+8C1uUFBgiRDujO42qBOZpCnCFAP8vN31Oqb3yCTW0fmKrPrgsf6hsVf5uo7b8CyBAqO1bY/k=,iv:/fGktRrQJpEasH1WrxBGr80f7FBdrho6YoCNp7Hbxd8=,tag:BlYuYtjvoXzjRLjEGJkLOw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age14tw3lf9mdn6dyxrxdsz9w96rp7g7qcdg04sqlmxzms0sjnkldvkq3jsz48
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6R24raEVIS0c2QjhsOWNp
+            eXcvWmFCc0VuT2doN204bEJtNGV1c3VSSWdNCjBjWDZnQlFTeWVwRmdDbm5PU01T
+            bDlRbWhQem9rZzNYZGxaNUJSaDRWMGcKLS0tIDR4UndUVldzUmZqMm1FZEVJNm1x
+            MTVTZFhxeTFyaElrYWtlbHcrS2I3dmMKtw0vGFZrWh0DgiDyZ22wxi3IXmBmjyCu
+            CAR3iDwAgTChP8sbuCPc6VDVlr5Yxk+Rxqz2rRXDC3euaTzVKXHXaA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1znnnyj40897mtt8syaa6p7f0xsvatn0s3lsgr0u4r0st258tjcqqchv20l
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEUkRlN3Bza0JDbWo1RDgz
+            S2JGQ0ZtTW9IWVlONFZZUHFiVzdid3JRMkUwClBYTXJKNnFDckFwSmIydDJEMGhC
+            dWtYNWxDcnBhTUZzR1RYMlIyc1N1Q0kKLS0tIDRZSmRIWXBZMzBnNktiWThKdXNj
+            UVFSU3JuKys4ZzhYb1VWZy9CeFRlaE0K9mzx0e3YjMJIelSbjrjyA5VLp7nn4a5C
+            GsjTzbZ2j377bIxVEuXngEjHi/qHJC9Y6f0GcBBT7caK6s+80JobKA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-09-29T11:58:47Z"
+    mac: ENC[AES256_GCM,data:i+JDlqubkhTktzbu0DJBS1AoXC8zCTpBl79rOizQ6kmNNDatKJ3dOtfXS3zLlmvmPmBCGCSwq6aZFzzRFHnz22e6M2TotHhxmp8j6vbNkWeCjekkalX9qGfxEUGAc8KYbn0cDUA2D9OIA+SEAJPaonmSUwJT6VmJ/0XKgH1YUmc=,iv:Ib2T0zscmTjoWqJ+QQzQYablAUAnL7GaC/BGDoJU3bY=,tag:l3cZq58ahqilJw/3PJyGGA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0

nuc-1/secrets.yaml

@@ -1,5 +1,5 @@
-hulk-builder-key: ENC[AES256_GCM,data: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,iv:6GrNnzDTFnZ7EEHGAz+VGpn/1i/VAKSfMWuvTqWzQ78=,tag:xuzfOHyoaEr5+xDy7o8OkA==,type:str]
-k3s-token: ENC[AES256_GCM,data:7GGZQMonbJiPZA03jWOlg1j9d2e07522weWskr4YXYPIv75dB/2fBXHobTRo5tgiGSuwtp5B+u6OMKlAn7h2Bw==,iv:FLFXSbZj7dzBKrpko9wNzY6LCWTB3QbaEVNqMpN99OE=,tag:xGyxmomnloWThRJ6WsOTFg==,type:str]
+hulk-builder-key: ENC[AES256_GCM,data:XKjqv/2uz1kTpWCCg7wvJtYvyHO85dKI6wh2Eh6XbArnigv0YHbw9o46Uh6Tn16TUh1ldPqnWEvaMYVFf+dobMsskWQ766fJjPGh0CZIF4gqplG9/y+zvEXG/4PUXAr1j/AbGv+lf8GRHm7PsGJGOPCDX/cvARr+1pscPwQrZfYJZMJ6PZMR4ueUe4hQXQJ6g6vvDHBS6SteAVMrQORa4iPUNlmq7C08GfPOWID47R0Z6+eutz3EQsocfg4tuMG6oieKrghE9EmENg4+XkIycFVT5K4KtU3kacjk38u2eH12mCIJLqKivskn8RsDRIB5KvTmwD0i+JA1/5XpCPAkSaFDtvIpqY0xx8d/oxyw+5HS5DfpUFdyimL571bf26S824gexoB7WF0WJe7cyu0R2EDQ6iEbnM/Y7Z5J+wR8i7E51aTQ3Eia/bbYsvIvvg8IjP7s/5zayPD+iRC6elwboADlwXNkaBAVlpyeo8z+jb9UjiSY+SwIAKaO0WxQgvDZdxvFAglOOHlU946oqt5o9R11sm5RZUjo7Aof,iv:6GrNnzDTFnZ7EEHGAz+VGpn/1i/VAKSfMWuvTqWzQ78=,tag:ZHjkjKC2mUR6oLDSLBa6bw==,type:str]
+k3s-token: ENC[AES256_GCM,data:nrszeC7c9ia2T4RcLO6RHHQTxabetpWRmYKIiaZKVHaHAic+TUk2GuP3k8G+/RGh6tCS3du9PM6kIzKWio9AUQ==,iv:FLFXSbZj7dzBKrpko9wNzY6LCWTB3QbaEVNqMpN99OE=,tag:tcz7akcFbiQ2f3P/xxi/HQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -9,23 +9,23 @@ sops:
         - recipient: age14tw3lf9mdn6dyxrxdsz9w96rp7g7qcdg04sqlmxzms0sjnkldvkq3jsz48
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBd2xibnF4QWxQRkhMa2lx
-            V0JCb2prQ04rWjRCUUQyanBJdDZ2Y2oxT2djCnhVdGlTaHZWMng0QW9zTlBGR2Fn
-            RnBRa3M2RmlnRTZZSVNDNGkrK1ZYUG8KLS0tIFM0WmhoV3hjTlBhTzdqYXc4WExq
-            cVlhNS9EUFhxc3N3eUliM3BvUHdzdFkKcpVee03Yb3N9cAZi2+udlN1V9ILw/hMD
-            NAdMhU+vop7rDBdW8kEtx4jWY4bYN5kbZXY/sIKJ0K04icC71RnFrg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhOEtDRjQ2R25UclN2bmRS
+            T0Zjc1BRbkNEM3VvUExpbzJtbllpZ0lrZmxrClcvbUh2NHhDQThpNHR1V2ZkY0Vv
+            aFgwbGZ0eDM2RTlHcHdLbCs0UklEVk0KLS0tIGlDcHZlbjYzQldzUTB0a1JwWElh
+            NUVuZUl3dUJqb21ZTXJJbzJ4cUt3OEkKI2egIZQV0dh/1QYi+fDFSKx8wqbtsdao
+            aSJk5AmMwkDInwRDCJvzhWyqH4Bxj+lR/JxkSYkaHG/OENHm3H0lzw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1jsrzvlyj5fzf6c3rysd79f68drmpgvh4myxqsl7mlm7gyhfunywq573mss
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkemFoZ01VYjRRZHBHWHVp
-            Y0w4RWJad3FtYnlpSFNpVzVJMU1tNGY2TTBvCjdqeXBVcXV6UEZWK0pxUmhGbXFv
-            cE9tcXB2NWYzLytiWVF4ZFVoNlg0RWsKLS0tIEw4dUVwbGdHUDA3VUNNTlYzTnpI
-            bFFscHdKeHE1UzUvNHV0WjBSSHBYcW8KGmr10sOuP0pGIlSUCBeAEdK7+Ce7V8el
-            1rLKZWaqgBeBM8y8dc8qlHxMIrYfwrKlPDzrcI1R72CWPj9r9hxrsA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpRDVxUU42aVIzY0ltTDA0
+            d3dmUWVLcmYxZHYyYXQ4RlNjUHVrZ3FqcmdvCmU2Tzd2ajBVWnQzWlkxbkxVb2N0
+            OTArT0ltMFh4T0lkRS9qam9IZjVMU1EKLS0tIDFTaGNEMDJrYndpWGZvM1BtMnNW
+            UlgwRFpSQUVML3N1MXNuVUVYb2Z2OXMKSSVAaa7baahUGobc2797sT8Q6QGPI5TD
+            6k1OWxZBYnua3+jncKOUvlkGRMEoOEMSPPwm3lgGnzgwX+klrFvCUw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-09-06T15:19:05Z"
-    mac: ENC[AES256_GCM,data:1E9OtOAWmFnuyzz5W2xS3lRXRnUmkwTNKz9H++JSh92imOW1g/q3rhmlUQQRDqYL7hFhVebsjye1jjQ4DZ3mC44Js98gM5fyMzy6akr3ZzND85gNJBEraSZZdPNKfA6CimTYvtrZBClzf6FatiW1m4OCXuyKV9Qnp2aceMx2ERQ=,iv:P2HzTuD0SLsPJi7l8iy3ltxjBHvWt+JbW9S1DjEwYb8=,tag:BZ+wCapwhquW8AMbzTqjEw==,type:str]
+    lastmodified: "2024-09-29T11:04:11Z"
+    mac: ENC[AES256_GCM,data:Sm+FPDwyX40KHoLOPQki4U9WCQnNWWvwWtVCM63ulw17X6T6+7tjNC92aYasE9XQShD61rf2UCmi4xUrSe4zIjWwLhU/ZQlvCGHm4w9dLm+hTalzBraF+nuWnWEcC8gjX0AS2yCnWLyo3EojgauWpyVqjrv8wJjrsy/qKN0rIlk=,iv:/7XOZspPYp10fnQKj2Fs5gRynnj7TKMo2GfCu0ptTws=,tag:sFu0LM3qyx+OGnWMGOsFbg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.0

nuc-2/secrets.yaml

@@ -1,5 +1,5 @@
-hulk-builder-key: ENC[AES256_GCM,data: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,iv:y07xECqKzixMiPucGa4sjBfVV5c2BMZNg8MrN09e8HY=,tag:w0kik+AMM2y/D49qXwnjlg==,type:str]
-k3s-token: ENC[AES256_GCM,data:J+/wP5U9IpV18dqp+PG4rQbrxhzwr9URK2beiroOLiiOIXxzVXgPbgvGA88vL9QTPV+qOkESkaGX5bBO89NaeA==,iv:ELRSv9T6WM3tu75TKtaKDoINsgZaoCa1U+O1gDGki+8=,tag:uxvvV7ibSI6AMtEee1y6Zg==,type:str]
+hulk-builder-key: ENC[AES256_GCM,data:RyG3Cfb6biBjuyArlfWCL/iTtzz5FvCp48l8HJOuGWCRhtDBhC4iChW5VP9ypbGhG7P3G66zoE6xnVbtgX9vbnMCOLerH3HUfLM3yoAHxGCga1IlWS/VjCsgcV5QaQpaulYVSN/fC9uMuZujrbvqf4GfN/XB1jd+f5Si/io2vXw4rdQq8Jm3kAldLuN48zJUl5zwFQkcVVbEwgrsmrysRu63hGXnydN27OapY8X+CRnhD6x/UJuPXdDjt4JCnlrKQBzRn5Q6Q7/Rnu/tJhM3AW3oFIYoEykUjrl4IeSiD9CX90c2RISe7Ms52LkizsfU62/y6AM/KH84FnDcVgLbjWM5nISlgZx/t1cyjtt5H6U+betN7Bopo5Qhe6SQ69x7Ksy0eExNnhdfNs77zkquzRiZ251rY103uH0ESJ3nbAmmQxCr9h/B9AlaEZbTzFZQ8g4OVVYeTHpj66fQgcJ1XkYO1cImcwaSBSufXhqA566C8Y7fAX2+IEIpK6YaGH6sujvOhNDqACM/sbr6D9d64dUiYQupwO89nLzs,iv:y07xECqKzixMiPucGa4sjBfVV5c2BMZNg8MrN09e8HY=,tag:O/pSIwfYPUgnmlJvc5gEEQ==,type:str]
+k3s-token: ENC[AES256_GCM,data:jI9enWxyx1s+A/MAO0SEvWpfcndYdY4oeRaTCIZjEq9EoAsuI+kHyPOz2VfuGeudySbjywhs1O+Klwh854YLmg==,iv:ELRSv9T6WM3tu75TKtaKDoINsgZaoCa1U+O1gDGki+8=,tag:PHFJmvVWsm929yvoP8bghw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -9,23 +9,23 @@ sops:
         - recipient: age14tw3lf9mdn6dyxrxdsz9w96rp7g7qcdg04sqlmxzms0sjnkldvkq3jsz48
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVdkd5Z29jdnRIMTlvWEdL
-            ZkJRZ0c0VnRXcTJBbTN0T3dKTjUxb3RpMGdrCjFhSWxkK2JiMTNFRnRMZHc4bEFZ
-            cVVHdW84RjY0TFRCTE9Ta1ZmZUdxUlUKLS0tIDNxRXpCdm9JMGJWVFFNZ0pmbHlq
-            YVo3cm1oQlk2eGh1OHNiZlVSMm5QRW8Kjnk0kw40A73CJOnLT5N1ySjWcN0lruVv
-            QTgAnQbhMo3YkLtEv6wmC1rNMKMGK05T0TdWvO13ugU3U2HELisxVg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLNnpXWWxwTUFkWUZMMklS
+            bDFRT01kZC9ndnFJUzJRTTdkV09ldlV6VDJZCjJ0V2E3dGpyU3IzUVNJdHhXZllD
+            VTBFNDUyeG1RUnF5UFpWV1hvbWZpd2MKLS0tIHRxR3JMb2Q4dmRPRklOazA0Ykw0
+            azg3b3pvWlova2hDODdiRUFhb2ZLc00Kqpux0hr5tmNzciaAsDv9qCfjsoSdlPf4
+            qaGcJ5q5MIQG7Pr0eFpHMsjUHzDuxRMiW1OhbjYWyB/Didn6r3D/mg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1ph4vt4lhrw4q974gm2g0xue3y8swy8qw9k8kg68hzxs7s04cxyzs5jujvs
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzVlorSklJT3I1VDhWRUdU
-            SEZBMUYzS0lCS1hUMlVoTFJMaHgxa3VsWjBFCmljMTBqUDhvM0MyR1krdk9hWENG
-            Rjg1VTZ5UzNxcHd0YndpdnZRQUxCeFEKLS0tIHYyRDFZM3FDcTc5OGVJU0ZWVS9x
-            RlM2ZUlwZzdvRkE4L1RDUDZHY2UrS1kKJH0k5ZoEREP7AxzBFitNFH4HgGO5RCVF
-            Dsow33d6fs/DCzIjE0UnnHLp8id1k2jnNUiwwU3F0SKIV7eUEQqHmw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSeWYyeGhZc3dWQWdvYm1C
+            a2tncTlsT0tEMXJtZGh6bWcvOUFIRnptUjBNCmlJM3pjYWJHb1JsOGg2dXRYeWhr
+            RWxxdi9NQnU2YklxdXVZRjdIQVJ2N0EKLS0tIEhMUkpQTnY0ZDhKU0R3dEFqMmxi
+            TmRhcHE1VmdDS0pON1djU1BBS093VUkKYF9hlS6+n4sMcrh391GtTIFGC0XkTv76
+            oT1MaYbujX7J/psDI8Z/HnAae3oJviAdzMbJOFQu4vci4I8+OYUi8Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-09-06T15:19:43Z"
-    mac: ENC[AES256_GCM,data:4zCTJjzlKYukfNxUHJTaG04l7FVimv9gnal94P+qu2pgrV8yKD3yigTg7zdeZmt8yZccHuTpVZr9YQgJIXYYX8nOKNN+7S3BvB6aMpL2g7K/1K3I7XnCbL6TJPYwBDRKPQB7VoojkNQvUBDsNbLakbDE0PiuhkZaseYp8V8GLJo=,iv:5xWMyXXpYIxM27KPwc78LifQORp/Qe+/dB6jnY2xXhY=,tag:t5tZ/0RWTQRlfPyNK4zLcA==,type:str]
+    lastmodified: "2024-09-29T11:04:13Z"
+    mac: ENC[AES256_GCM,data:axFv1FZIDmqFbuMDoUlnhAzOa1UV9TtUThqAafF8VcQ+siJkcWX0C4eiLdXcr9y4o1icZsgI2zHzZfOhpxtdR1NcaeEYicbnKadTqUaW6Gg8RvLNRA9HiutZajgtZzncqfl/ZOgzdhCbiyAhHFXdjzuclSPLZjmaaBTjSpbl7NQ=,iv:nLEIcqdsrY3VXfbxrwNSL6CSKniSOacscJoNG38W+8Q=,tag:NfLgsnEJXDgQOebubKh/UA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.0

nuc-3/configuration.nix

@@ -18,6 +18,7 @@
 
   sops.defaultSopsFile = ./secrets.yaml;
   sops.secrets = {
+    "github-pat" = {};
     "ereslibre-social-cloudflare-tunnel.json" = {
       owner = config.services.cloudflared.user;
       group = config.services.cloudflared.group;
@@ -65,6 +66,10 @@
 
   networking.hostName = "nuc-3";
 
+  nix.extraOptions = ''
+    !include ${config.sops.secrets.github-pat.path}
+  '';
+
   users.users.ereslibre.extraGroups = ["video"]; # surpillance experiments
 
   services.cloudflared = {

nuc-3/secrets.yaml

@@ -1,6 +1,7 @@
-matrix-synapse-registration-shared-secret.yaml: ENC[AES256_GCM,data:OgwyvQ/i+k8R6Dc4WynpWt/zS/uElfJrbrr8hX4WDrP5OIsZXOPnBmf6hn1mBM7xSSTbLWzNxbvRcTA=,iv:1rsCuZrLbaxRlgRPKXbwnrDagkebIuRrlt9Nhu35vAQ=,tag:2DOzGDkJR4zu0q7ojwJDVA==,type:str]
-ereslibre-social-cloudflare-tunnel.json: ENC[AES256_GCM,data:AcRYmpb/JsYBeEpiEYYy3twmY/ufcmBrBToBYoNlI0ynoYoyE+uP5y9J1eTDuhsUx8tMNC6oa4lkh358v/FAGd8dXwbyXkn3p+QkvFCVG4jMJEn2DeEWnOt0kbS2Mg20kpPwnsKV12TOen93+ZKNQu+vYHOCxqLPwFvap+LUX3+wOAE/r542aJEb1sOLoPJApWWtnzFnN4vnV12FQLUO6YxBiEdTlw==,iv:uvIQuP54bhesqqKqnVKzw/rOPj8yJoOS5/9X5cRtEto=,tag:P4nxO18nTSQi29rvEQ/oZA==,type:str]
-hulk-builder-key: ENC[AES256_GCM,data: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,iv:e5fLnwRvd0VGPAVvoteVDotN17/Et1iGwzLGynq+3Wg=,tag:0krdwnLqabW61LtOSHs5Hg==,type:str]
+matrix-synapse-registration-shared-secret.yaml: ENC[AES256_GCM,data:oBdYOWF4EjOZTahtTEJ0NbVwLLp+QFGdtVA0B5LJe2k0xd9074p3Sa3u49GVZ+8be2xq62r+6b2xfi8=,iv:1rsCuZrLbaxRlgRPKXbwnrDagkebIuRrlt9Nhu35vAQ=,tag:bSmtqtG6eZmma0WzyP4lsQ==,type:str]
+ereslibre-social-cloudflare-tunnel.json: ENC[AES256_GCM,data:FpbGQqY+ixJjjwyI9xINYKClxaL026ZTK83FmldBIgKvawZaLl0hvCxRURnMBV1bKVSIuCd3KDDpfO/LrGtEEdUQpQB3wvwhPs3v4WxkFlVdQoModkZc5WLeQsN2dAWoxEncM9xrugPMRUEH8yaRf35yo2Hio9m/iRYjAh1Ec08mhHPgueldtCajlIpuwE6bA55ZFCbjtqjMN0+qmQ3pFHhuutz9iw==,iv:uvIQuP54bhesqqKqnVKzw/rOPj8yJoOS5/9X5cRtEto=,tag:eBg6j3tEXRAhusA4wHNFKQ==,type:str]
+hulk-builder-key: ENC[AES256_GCM,data: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,iv:e5fLnwRvd0VGPAVvoteVDotN17/Et1iGwzLGynq+3Wg=,tag:xph43t1o6jIrC4aqx8z6tA==,type:str]
+github-pat: ENC[AES256_GCM,data:g+il8ApK2s64Xpd7M4ITaXyOD4z/I560v3NbRuY1lYwfwx/fk62Wr27h/mrurP/B85iJCmf4g70krqDM+gyt9a0qd8U=,iv:U6VZGBUFH9Rso9silc+NtsEg4fdVoMFBzbohOooP11o=,tag:mk8mJe6OeaQ61w/9odUtzA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -10,23 +11,23 @@ sops:
         - recipient: age14tw3lf9mdn6dyxrxdsz9w96rp7g7qcdg04sqlmxzms0sjnkldvkq3jsz48
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZVkFGY2xKVFl5L21xZWQ5
-            MXY0NXN5YmdSY05qb0V2eE1EVFBjRG8vRDNnCnI4Q0RTWjFYTWNneTMyZURkYVRN
-            MkU4S2MzUGpnSWdoNGJ3V1BiVlRwQlkKLS0tIGxaMjZIWk56Z3ptaXBmbkFmMmEr
-            Z0s3a3Q0alhzK2g4NkJVZGVYRnFGdnMKVlRN/PxP7uFSITHeWa7esvQzvewHsCoK
-            9qBz3FsbuSpESUMmBVnwDoussAgJB5UiKjCorD8o1Di+iYJdG5lBKA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuVFpkL3ViSlpUM2k2Mkta
+            TkhqY1YvRVV4MWpaTk1icm5uenJKRnpYcmdjCndQWlpWdk1YVG9BM2dzMGNMeENR
+            bU1mUkh4aFJiSDlBYUdGcGN0cEtHdHcKLS0tIDlKbnc2c29TSldVTEljVmE0cVMr
+            b3NTNVhnYnhZTFd1ZWpqdzZuOUdnd1UKfAC5uWb+cL6JZ5ibWn1juiKCbtu3oAwK
+            UVl5ZrgD5mZQ0v4HM67SCJYwAXi1Yl7Q6r8uYxlLmX9Oxy661+wJcw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1jt7ucv03v82ccuwwhaulgywswsc5h2uxauyrdmra8gsd47ajfyasyp4r9q
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3RGhHQWV2MHdXTGd3V0tl
-            K3FubmZLZHkrUGpJeHNCN1A0K2xZMGhQMkhBCmtrYUpZR3VWampiZTlRQ0RvaUN2
-            dHJlcHVmY2cvOGZ6SkhGN0dHYWtNcm8KLS0tIGhOSE1vOXlMZVc3OTBieTZ0UG4z
-            eVZhQ2tHbktaZkhhSmh5T1R5MWtxVlEKsX7QxtfycTa5KnPcVTeiomRafErktAse
-            lGiEhBfPtsIoWtC38/QY5KhhK1GYu4eAYjqi5aH9tT2t+WaHHXZZqg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3RFFIdEIyRTJFMjJvNE4v
+            eW94L1pzRXJxLzlnRnBBVGZINmJDcFlCR0NnCjVNZm1HWEE0WHM4Zmw3OVR6MjZK
+            NlJyb21DTUJ6Yko2NFdkc05YRWhtYXcKLS0tIE4waTd2UC8wb0JUbVhmR1MzMnNU
+            L09CSXFlQ2JUYzUwemlHS0pESkdPblUKV3zZtMc4CwOj3tLE/guC6+rUGZ6ZZWYC
+            HIBq9kp7COAKlmIiPrgdN1UqjM0Gc5jwgiAOW4GT8LiItzOq33GXsA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-09-06T15:20:09Z"
-    mac: ENC[AES256_GCM,data:+jENsitCD0KEUseWcfkGPGszH+lgT9AZpLQFi5nViDJOe9RNHwNeFBaBYFcTIjQVhfWvYh9HsysQ6sv8NQ/SI88ytG2l3SQRiNmzfBzPT0kJ8W2tJ5Lo91U/1aEbJDH7fSgyWPLDr7gEu5mJHK04LlcQWuhRxbowhgCglVbj0bc=,iv:X0GxR590OtRqkJOjptsbJ3W5ZfE5eMeRcC+GOk1/Jmg=,tag:+gbvkm6q+OaZ888gSu8YaQ==,type:str]
+    lastmodified: "2024-09-29T11:55:37Z"
+    mac: ENC[AES256_GCM,data:B8oVbx2GNPhBhvDQ9rQNiZ9ag3HEYNGcphb+FkgJDQJzPl/wwcMVb9k/q1OWQj8VQ6LCW76Yh7g+zuXt4wSAOshDAnckUhok4elXKE45wU5gxKxcFUIwYDIGt4guX1q+eW74QHtDuw9LhuGJEtnHdkKlkEjEVuewIGlgaSkm+rQ=,iv:c+StUTYwgalotbZQDcxO+EWvplGde8YzDlACmnMtbsc=,tag:UQmQF0iFQBdYhqaBJ1wKWA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.0