client-remove: test-victim

2026-05-20 19:29:47 +02:00
parent ea3100f091
commit aed977aa56
5 changed files with 32 additions and 78 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -23,8 +23,7 @@ creation_rules:
    age: >-
      age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6,
      age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0,
-      age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6,
-      age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3
+      age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6

  - path_regex: ^secrets/gitea-pat\.yaml$
    # Write-scoped Gitea PAT (dtoro user). Same recipient list as hello.yaml
@@ -33,8 +32,7 @@ creation_rules:
    age: >-
      age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6,
      age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0,
-      age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6,
-      age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3
+      age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6

  - path_regex: ^secrets/gitea-tokens\.yaml$
    # Workstations only.
--- a/hosts/test-victim.yaml
+++ b/hosts/test-victim.yaml
@@ -1,18 +0,0 @@
-# Generated by mcp/build_host_files.py from inventory.yaml.
-# Do NOT edit by hand — your changes will be overwritten.
-# Source of truth: ../inventory.yaml
-name: test-victim
-kind: lxc
-os: linux
-role: test
-mesh:
-  netbird:
-    fqdn: test-victim.netbird.selfhosted
-mesh_globals:
-  primary: netbird
-  accepted:
-  - netbird
-  - tailscale
-age_pubkey: age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3
-mcp_endpoint: https://mcp.hubris.network/sse
-secrets_issuance_endpoint: https://secrets.hubris.network/issue
--- a/inventory.yaml
+++ b/inventory.yaml
@@ -352,11 +352,3 @@ hosts:
      netbird:
        fqdn: ludo-mini.netbird.selfhosted
    age_pubkey: ''
-  test-victim:
-    kind: lxc
-    os: linux
-    role: test
-    mesh:
-      netbird:
-        fqdn: test-victim.netbird.selfhosted
-    age_pubkey: age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3
--- a/secrets/gitea-pat.yaml
+++ b/secrets/gitea-pat.yaml
@@ -13,38 +13,29 @@ sops:
        - recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArNkRINHhiTlF1QjhxZjBM
-            bVBWUXp0aXJpZldxV01XcXlWL1NvWFI5VnhrCnIwWG5MR2FhaStpa1dUTE45bE9K
-            aGdvQmdodkk1ZzVkTE1SUk8xNHhsNU0KLS0tIGtwTEx5NUhBZTE2UWRoMlBzWU5D
-            WFhoRmRPL2tGUjFQamRLeTU4NWJpQVkK0fp2Le/3DG/aEQdq/T/Y6iYTmJAvVM7J
-            h6hKRW4tSwMxp/ibOKSCl9GW4SFOqmW9koJs9OJ67HjgmIopkXvioA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQL1FueldvT09lV011Q0hz
+            MlJ1YkxIYXZDNDVQQWo1MFQrRlNBcXNIYVNRCllXYVZrczdBNHdPemJybUVlQkVl
+            d0hKUTVsTyszOUFrY1BQQllSM2JWa2sKLS0tIDFISUw3T1lLYm10YXZaeFlTMWVj
+            ZHFWN0ZQTlhIc0pGMThoWWViN2lmVUUKsWRBHqoRVmY2Clcro5aKhQj9yX5W4Kh3
+            arC5FKBoZ/8KlcS7zxC9vIISOqlQu7MCKA8L//HX/gkfcz77aS6t1w==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRnZFd0RHV0RlNUxiVElr
-            YWdZTUFYMmFpSFFFelhiRllFWG50UnNuQ1NnCjA5emVCZTNPL2dsR3NLZFg0L2pB
-            NTlmRkZxNW1nYU0zTDhLVTZrcitFNmsKLS0tIHNuU1dKNzlPVlBCeWFVNU9ranZR
-            OXk3MGNjMTUrT3BBb0t0d0g2Z21sck0K5liL8QwW48RAkUZXLnPzx5rnuWm//At8
-            5eM9/ECKHhcIr0RX3yms+t3zmeSN3JutkzyX9XB+vnc9H3jPo64dRQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFTVB1eWh5M3RUVFRubUFE
+            OTRrbWRnUDhsVGlLZkFWckRXZ08xTkxCMlVNCnFHcU9aMklma3RJZnZ5OHUxQVYx
+            SWFZMEJSNHExT0lsdW9FNkx0T3ZNQ0UKLS0tIEpseGdCbTJudUNWUUJGYUg1STJV
+            Qm9QU3Z2NHhiRWh6VnY5cDRRQVk2ZUEKktovOMBi2eT4Hxwm8i8gy4GYPpOZ3nIy
+            cDM6yBpUQMybiY3jMji41ELg12vF2kQ286W6lQKURdl9yYoGz0SfqQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnemdGaWt0c0FBa0swRjVC
-            dDJUcjBpY3h3OEhBTlhsdHpxcnZEYVlQbmxBCkQ5ZCtFSUh3RFR5RTVDOVdlVkpG
-            Wm9nSGl3ZEVqa1VISUFWL0gyaUEzR1EKLS0tIHZDZDRzcGtDNzZkZFQ0eWtaYndB
-            SUVvbkk1T0VkY0I2ampPUEI1U2ZmazAKJKQs0olvC+5CZCwWOD1v+cta1iPK6w6C
-            TQE3d/R3B7+7e/RTZSNDv8gsznh98n8s5WIU/PhTvKruHsy9c3FAyA==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOZmpLMmE1aFMxdCtSUm1O
-            UXAxekpyS2E5dHM4S0h3c2NjRXhZK2JFTmpNCkhRWXpuSmJPc25kSGNrTUFEVkdW
-            WUtuOHhCRndiTEJ5YjFwWVFmbTR3amcKLS0tIDV5dmE3U0ZqSzd0a1NnSVBvSi8x
-            a3d4TUNXcEJYNEZ2L0t3VDltSVNNbkEK4AzxY7qsOPvSh1XrxYvW5w1RFSvuU0ig
-            FjOVah9yx/v1yVWP8jafH8ond8dBfT/T86Zo1KIM/xpMTH5c3be6vA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHd0NhOC9FWmVSL0ExKzIz
+            L1hiU3RhKzh4SzFCNURhWFAxZTF4QWJIdmhBClQ4SzBEY2VweUR5UnJJSkk1OUVj
+            MWp5WUtQcE0yNFh5R0JoTGpUaWJiU0UKLS0tIDFQbDZoUXlPSURndTNEN2d0TjJS
+            djVvR2hGSllUNlZJNURrMG43bmZlU0EKl7SfN6/JGbzDA3YVrRnua5QK8xEdkWoB
+            ey5Yf4Zg0obqYIS5SX8QC/YtoeMANVkKtqVTOVE2PYLJtrC6l7vKxQ==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2026-05-20T16:24:18Z"
    mac: ENC[AES256_GCM,data:d3qcjEqpPIFeut634ImvISJLdit0MQWcdFYomrsqriqJ0NUKdyq3XCk85+vvPvDWikB4WEApk6HMXssSY8mhDci95q5Ssmr+JRAhLebMZjs9yXUf9A7vXpNFswmdldu3CKBiDrhm2GE08qUfsCkcf3jjihEqsfHhxMuWSd5fZpU=,iv:VZgvZ3bBArRChgRX38U6/43XoX5aTnts7Kd4S9spBPk=,tag:/5oOw5yvulvFT6KXv2zj0g==,type:str]
--- a/secrets/hello.yaml
+++ b/secrets/hello.yaml
@@ -9,38 +9,29 @@ sops:
        - recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6a25WS2tqQUQ4K3UybFpB
-            L1MrR3lIWkRsVWVZNm12NzJEdXpGNHBZSDFvCjZoVlQ5Q0FaemlXT2hZT3U3cVdW
-            cHZSd3llMUtZVnRwZjE5cUhnaGVTTWsKLS0tIGdwanhvVmhMZEhxSkg4MklDckNB
-            VWNJR2FnSUh0WDNKWUR1VktWTG5aQU0KI/OMhJjc0g/LSI+NQiG5QDpHjZjZwrK9
-            kSJTKZ0jyqSc1/uiSuxDkj56XU4WjlI5qSibkRFk0g+ep20EPRBk7Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCbWhQa2RreXl3Ni9zZExQ
+            dzB5Q1hSZzJSb1NlaEx3bEFCK2x6Ty82ZEJ3Cng3Q1NmKzhpdmpvTWFOL0lUb3F6
+            emtvNCt3elQwTndoNzRIM2FoZTlpTVUKLS0tIER6STdwVUtnL0lreFh3Z09FYlBo
+            azJuWjVuNGJURTNPYU1aWWZGM0dpc2cKFM8AjHFg68fedY0Xrg2U69+Qxc5Pgn6f
+            QipSsaXrCohzNKieqCG9maKuLcGrgMQ1OJqZQm+hfit6CRKUmVHRkw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4dkRtdlJmcHMva3g0S28x
-            QWQrWGxzb2RQSUErUzYvR2V0YjFSMG51YVhFCjdqdXQwcVp5SmlzNzRxU3hOZGtS
-            QmNBTFhwNXpmRkFZT2RaR3R6cXhRT00KLS0tIFY3cUlWK0g2RGpJN2t1SmtlTTVn
-            NlZ6UTRjNlVMMWg2K2pMdnhUdVlpYzAK/nLn0psqUxMsD5XCEiArB5+dQqahMA1f
-            SP9NzznMwsk1YwlFN94GGKxXge+sSWBHtUdqUOK104ZYzRZVnqduuw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2TVpWeC9FcmUxckNadmtK
+            d3BwZnExR3VqeXBQSGhNdStPVXM2MkdjQXhBCkpHMmxPZ3JWaVVvUGwrVjZadXlR
+            V3VaR2l5Zm9zb1VrREphM09RMU5mR0UKLS0tIGlYZm5XbTA2WUcvWU9FWlZYSWNZ
+            L1JYYmJzLyt6bzJqdlk2TjYvNUdVVTgKlj1b9zQ9cBG3YQI2t4fjz3t9ySBxQ15w
+            qxcyGspEQ9F+4OtoRQP0FCfmJIBNxvAoT2I5TjspH6dl2o1ID+332Q==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhSVRsZlF0QWI0Yi9Oc2Js
-            d3BRWTd1V0RsZFYyaDRuOGxCb2Q1bm5tczFNCkZBdGtWaHRqdVhUcHZNS3RyZWto
-            WWhpTlZEdktWOGRLT1l2WW1xL1pMTWsKLS0tIEJjSVdNRWRXWGcwaktJSVcrb2FR
-            cWVmeDh1MUhSb2JheUNOVFRqWmZ3L28KCi8qUt/4Ujv5POaGnp+Sumi4Khu7+mLs
-            PBbJ4U1WaWKGZFtjBqNMw2aHVe4h0AyXKGOVHt773EuvLqd2f8vxKQ==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCK1JZNXcyRGdKYU03eHFX
-            Z1dXdGtpL3dZMVV3QU9XbXF2RFFNS1BpdXgwCmNDa09mT0FmZk8xbG1oWW5UMnF5
-            YVRmRmtvaEg1Mnk0REdOV0lwR2sxcjgKLS0tIHlTUVoxaEthaXpieXFodTZ6ZFQ2
-            WjhqUzFza2NJdXk4YVpwWnlXRlVTK0kK6yheNVJcch4HXY7RteveEcINn1KlAPkw
-            ABTNVqSa3o9SEu6kN3iQf7zfuwNOB1GTmUjQixgHPYNEZPoPzXO0jw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFa1NwSGlhUzgxdjI2V0Ew
+            VVNRS1o2L00wM0QvdTFXelFLVnBrQ2ZHRHprCks0Z2ZQbzdQNG5hVFlCZXFrSG5B
+            cG5Qb2JUbnk4ekdJSER2MU5NRGZ6NEUKLS0tIDF4cjNzWnBLaXJNS1RHbVozVUtp
+            bTkzM21jNndEdDV0RmtxSVZ5SkdQcGMK+MZNNAfnnXq7VjIvaDtJEaImk0mecErp
+            gzV3b0MOKc2eTiuaWRNH1yAhJOFTK9iQfC7dDUI8npE+zLOgpLEZ9w==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2026-05-20T14:39:14Z"
    mac: ENC[AES256_GCM,data:CAoIW1sJkIbNoXMaVlXwfHdREzATNqDKpSN5ecaSiRARThB0/tcLNbkazXKyV1Rx5b+b3s+yCpBzwmNnH6ytaCzG5pKPcnfd6YJq7C5rm/EQHyaVGrPdBsSfqiz4yBXKClej//v3+qkD5Ls2PMppv5KmqigOKNQC/ot3ht2c7lM=,iv:eOmDDclksr9f9CDu6dJprSFwlWuoggzVFjyfqWf5Uhg=,tag:IU3sMlIi92ohM86zOIJdAg==,type:str]