From aed977aa56b9939ee975916e73a157330aaec3a4 Mon Sep 17 00:00:00 2001 From: root Date: Wed, 20 May 2026 19:29:47 +0200 Subject: [PATCH] client-remove: test-victim --- .sops.yaml | 6 ++---- hosts/test-victim.yaml | 18 ------------------ inventory.yaml | 8 -------- secrets/gitea-pat.yaml | 39 +++++++++++++++------------------------ secrets/hello.yaml | 39 +++++++++++++++------------------------ 5 files changed, 32 insertions(+), 78 deletions(-) delete mode 100644 hosts/test-victim.yaml diff --git a/.sops.yaml b/.sops.yaml index db10937..02668f8 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -23,8 +23,7 @@ creation_rules: age: >- age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6, age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0, - age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6, - age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3 + age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6 - path_regex: ^secrets/gitea-pat\.yaml$ # Write-scoped Gitea PAT (dtoro user). Same recipient list as hello.yaml @@ -33,8 +32,7 @@ creation_rules: age: >- age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6, age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0, - age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6, - age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3 + age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6 - path_regex: ^secrets/gitea-tokens\.yaml$ # Workstations only. diff --git a/hosts/test-victim.yaml b/hosts/test-victim.yaml deleted file mode 100644 index 32c7c18..0000000 --- a/hosts/test-victim.yaml +++ /dev/null @@ -1,18 +0,0 @@ -# Generated by mcp/build_host_files.py from inventory.yaml. -# Do NOT edit by hand — your changes will be overwritten. -# Source of truth: ../inventory.yaml -name: test-victim -kind: lxc -os: linux -role: test -mesh: - netbird: - fqdn: test-victim.netbird.selfhosted -mesh_globals: - primary: netbird - accepted: - - netbird - - tailscale -age_pubkey: age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3 -mcp_endpoint: https://mcp.hubris.network/sse -secrets_issuance_endpoint: https://secrets.hubris.network/issue diff --git a/inventory.yaml b/inventory.yaml index 03883b4..cc9f0fd 100644 --- a/inventory.yaml +++ b/inventory.yaml @@ -352,11 +352,3 @@ hosts: netbird: fqdn: ludo-mini.netbird.selfhosted age_pubkey: '' - test-victim: - kind: lxc - os: linux - role: test - mesh: - netbird: - fqdn: test-victim.netbird.selfhosted - age_pubkey: age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3 diff --git a/secrets/gitea-pat.yaml b/secrets/gitea-pat.yaml index a865c08..0c2117e 100644 --- a/secrets/gitea-pat.yaml +++ b/secrets/gitea-pat.yaml @@ -13,38 +13,29 @@ sops: - recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArNkRINHhiTlF1QjhxZjBM - bVBWUXp0aXJpZldxV01XcXlWL1NvWFI5VnhrCnIwWG5MR2FhaStpa1dUTE45bE9K - aGdvQmdodkk1ZzVkTE1SUk8xNHhsNU0KLS0tIGtwTEx5NUhBZTE2UWRoMlBzWU5D - WFhoRmRPL2tGUjFQamRLeTU4NWJpQVkK0fp2Le/3DG/aEQdq/T/Y6iYTmJAvVM7J - h6hKRW4tSwMxp/ibOKSCl9GW4SFOqmW9koJs9OJ67HjgmIopkXvioA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQL1FueldvT09lV011Q0hz + MlJ1YkxIYXZDNDVQQWo1MFQrRlNBcXNIYVNRCllXYVZrczdBNHdPemJybUVlQkVl + d0hKUTVsTyszOUFrY1BQQllSM2JWa2sKLS0tIDFISUw3T1lLYm10YXZaeFlTMWVj + ZHFWN0ZQTlhIc0pGMThoWWViN2lmVUUKsWRBHqoRVmY2Clcro5aKhQj9yX5W4Kh3 + arC5FKBoZ/8KlcS7zxC9vIISOqlQu7MCKA8L//HX/gkfcz77aS6t1w== -----END AGE ENCRYPTED FILE----- - recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRnZFd0RHV0RlNUxiVElr - YWdZTUFYMmFpSFFFelhiRllFWG50UnNuQ1NnCjA5emVCZTNPL2dsR3NLZFg0L2pB - NTlmRkZxNW1nYU0zTDhLVTZrcitFNmsKLS0tIHNuU1dKNzlPVlBCeWFVNU9ranZR - OXk3MGNjMTUrT3BBb0t0d0g2Z21sck0K5liL8QwW48RAkUZXLnPzx5rnuWm//At8 - 5eM9/ECKHhcIr0RX3yms+t3zmeSN3JutkzyX9XB+vnc9H3jPo64dRQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFTVB1eWh5M3RUVFRubUFE + OTRrbWRnUDhsVGlLZkFWckRXZ08xTkxCMlVNCnFHcU9aMklma3RJZnZ5OHUxQVYx + SWFZMEJSNHExT0lsdW9FNkx0T3ZNQ0UKLS0tIEpseGdCbTJudUNWUUJGYUg1STJV + Qm9QU3Z2NHhiRWh6VnY5cDRRQVk2ZUEKktovOMBi2eT4Hxwm8i8gy4GYPpOZ3nIy + cDM6yBpUQMybiY3jMji41ELg12vF2kQ286W6lQKURdl9yYoGz0SfqQ== -----END AGE ENCRYPTED FILE----- - recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnemdGaWt0c0FBa0swRjVC - dDJUcjBpY3h3OEhBTlhsdHpxcnZEYVlQbmxBCkQ5ZCtFSUh3RFR5RTVDOVdlVkpG - Wm9nSGl3ZEVqa1VISUFWL0gyaUEzR1EKLS0tIHZDZDRzcGtDNzZkZFQ0eWtaYndB - SUVvbkk1T0VkY0I2ampPUEI1U2ZmazAKJKQs0olvC+5CZCwWOD1v+cta1iPK6w6C - TQE3d/R3B7+7e/RTZSNDv8gsznh98n8s5WIU/PhTvKruHsy9c3FAyA== - -----END AGE ENCRYPTED FILE----- - - recipient: age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOZmpLMmE1aFMxdCtSUm1O - UXAxekpyS2E5dHM4S0h3c2NjRXhZK2JFTmpNCkhRWXpuSmJPc25kSGNrTUFEVkdW - WUtuOHhCRndiTEJ5YjFwWVFmbTR3amcKLS0tIDV5dmE3U0ZqSzd0a1NnSVBvSi8x - a3d4TUNXcEJYNEZ2L0t3VDltSVNNbkEK4AzxY7qsOPvSh1XrxYvW5w1RFSvuU0ig - FjOVah9yx/v1yVWP8jafH8ond8dBfT/T86Zo1KIM/xpMTH5c3be6vA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHd0NhOC9FWmVSL0ExKzIz + L1hiU3RhKzh4SzFCNURhWFAxZTF4QWJIdmhBClQ4SzBEY2VweUR5UnJJSkk1OUVj + MWp5WUtQcE0yNFh5R0JoTGpUaWJiU0UKLS0tIDFQbDZoUXlPSURndTNEN2d0TjJS + djVvR2hGSllUNlZJNURrMG43bmZlU0EKl7SfN6/JGbzDA3YVrRnua5QK8xEdkWoB + ey5Yf4Zg0obqYIS5SX8QC/YtoeMANVkKtqVTOVE2PYLJtrC6l7vKxQ== -----END AGE ENCRYPTED FILE----- lastmodified: "2026-05-20T16:24:18Z" mac: ENC[AES256_GCM,data:d3qcjEqpPIFeut634ImvISJLdit0MQWcdFYomrsqriqJ0NUKdyq3XCk85+vvPvDWikB4WEApk6HMXssSY8mhDci95q5Ssmr+JRAhLebMZjs9yXUf9A7vXpNFswmdldu3CKBiDrhm2GE08qUfsCkcf3jjihEqsfHhxMuWSd5fZpU=,iv:VZgvZ3bBArRChgRX38U6/43XoX5aTnts7Kd4S9spBPk=,tag:/5oOw5yvulvFT6KXv2zj0g==,type:str] diff --git a/secrets/hello.yaml b/secrets/hello.yaml index a02a486..5769f8c 100644 --- a/secrets/hello.yaml +++ b/secrets/hello.yaml @@ -9,38 +9,29 @@ sops: - recipient: age1xkklkvnk5z0fsnh6cfgv70hy9ksfy8rdprwerzw4yk3p4p7cxcqs2yvpz6 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6a25WS2tqQUQ4K3UybFpB - L1MrR3lIWkRsVWVZNm12NzJEdXpGNHBZSDFvCjZoVlQ5Q0FaemlXT2hZT3U3cVdW - cHZSd3llMUtZVnRwZjE5cUhnaGVTTWsKLS0tIGdwanhvVmhMZEhxSkg4MklDckNB - VWNJR2FnSUh0WDNKWUR1VktWTG5aQU0KI/OMhJjc0g/LSI+NQiG5QDpHjZjZwrK9 - kSJTKZ0jyqSc1/uiSuxDkj56XU4WjlI5qSibkRFk0g+ep20EPRBk7Q== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCbWhQa2RreXl3Ni9zZExQ + dzB5Q1hSZzJSb1NlaEx3bEFCK2x6Ty82ZEJ3Cng3Q1NmKzhpdmpvTWFOL0lUb3F6 + emtvNCt3elQwTndoNzRIM2FoZTlpTVUKLS0tIER6STdwVUtnL0lreFh3Z09FYlBo + azJuWjVuNGJURTNPYU1aWWZGM0dpc2cKFM8AjHFg68fedY0Xrg2U69+Qxc5Pgn6f + QipSsaXrCohzNKieqCG9maKuLcGrgMQ1OJqZQm+hfit6CRKUmVHRkw== -----END AGE ENCRYPTED FILE----- - recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4dkRtdlJmcHMva3g0S28x - QWQrWGxzb2RQSUErUzYvR2V0YjFSMG51YVhFCjdqdXQwcVp5SmlzNzRxU3hOZGtS - QmNBTFhwNXpmRkFZT2RaR3R6cXhRT00KLS0tIFY3cUlWK0g2RGpJN2t1SmtlTTVn - NlZ6UTRjNlVMMWg2K2pMdnhUdVlpYzAK/nLn0psqUxMsD5XCEiArB5+dQqahMA1f - SP9NzznMwsk1YwlFN94GGKxXge+sSWBHtUdqUOK104ZYzRZVnqduuw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2TVpWeC9FcmUxckNadmtK + d3BwZnExR3VqeXBQSGhNdStPVXM2MkdjQXhBCkpHMmxPZ3JWaVVvUGwrVjZadXlR + V3VaR2l5Zm9zb1VrREphM09RMU5mR0UKLS0tIGlYZm5XbTA2WUcvWU9FWlZYSWNZ + L1JYYmJzLyt6bzJqdlk2TjYvNUdVVTgKlj1b9zQ9cBG3YQI2t4fjz3t9ySBxQ15w + qxcyGspEQ9F+4OtoRQP0FCfmJIBNxvAoT2I5TjspH6dl2o1ID+332Q== -----END AGE ENCRYPTED FILE----- - recipient: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhSVRsZlF0QWI0Yi9Oc2Js - d3BRWTd1V0RsZFYyaDRuOGxCb2Q1bm5tczFNCkZBdGtWaHRqdVhUcHZNS3RyZWto - WWhpTlZEdktWOGRLT1l2WW1xL1pMTWsKLS0tIEJjSVdNRWRXWGcwaktJSVcrb2FR - cWVmeDh1MUhSb2JheUNOVFRqWmZ3L28KCi8qUt/4Ujv5POaGnp+Sumi4Khu7+mLs - PBbJ4U1WaWKGZFtjBqNMw2aHVe4h0AyXKGOVHt773EuvLqd2f8vxKQ== - -----END AGE ENCRYPTED FILE----- - - recipient: age1wkxaxvl8n60mz825m82hryxenaj44ea4xles2zf8ctyswd3jxphql9mzs3 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCK1JZNXcyRGdKYU03eHFX - Z1dXdGtpL3dZMVV3QU9XbXF2RFFNS1BpdXgwCmNDa09mT0FmZk8xbG1oWW5UMnF5 - YVRmRmtvaEg1Mnk0REdOV0lwR2sxcjgKLS0tIHlTUVoxaEthaXpieXFodTZ6ZFQ2 - WjhqUzFza2NJdXk4YVpwWnlXRlVTK0kK6yheNVJcch4HXY7RteveEcINn1KlAPkw - ABTNVqSa3o9SEu6kN3iQf7zfuwNOB1GTmUjQixgHPYNEZPoPzXO0jw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFa1NwSGlhUzgxdjI2V0Ew + VVNRS1o2L00wM0QvdTFXelFLVnBrQ2ZHRHprCks0Z2ZQbzdQNG5hVFlCZXFrSG5B + cG5Qb2JUbnk4ekdJSER2MU5NRGZ6NEUKLS0tIDF4cjNzWnBLaXJNS1RHbVozVUtp + bTkzM21jNndEdDV0RmtxSVZ5SkdQcGMK+MZNNAfnnXq7VjIvaDtJEaImk0mecErp + gzV3b0MOKc2eTiuaWRNH1yAhJOFTK9iQfC7dDUI8npE+zLOgpLEZ9w== -----END AGE ENCRYPTED FILE----- lastmodified: "2026-05-20T14:39:14Z" mac: ENC[AES256_GCM,data:CAoIW1sJkIbNoXMaVlXwfHdREzATNqDKpSN5ecaSiRARThB0/tcLNbkazXKyV1Rx5b+b3s+yCpBzwmNnH6ytaCzG5pKPcnfd6YJq7C5rm/EQHyaVGrPdBsSfqiz4yBXKClej//v3+qkD5Ls2PMppv5KmqigOKNQC/ot3ht2c7lM=,iv:eOmDDclksr9f9CDu6dJprSFwlWuoggzVFjyfqWf5Uhg=,tag:IU3sMlIi92ohM86zOIJdAg==,type:str]