From 21b4ed02ccd7c43309dbf17abd84885b69471040 Mon Sep 17 00:00:00 2001
From: Christoph Schmatzler <christoph@schmatzler.com>
Date: Sat, 20 Dec 2025 20:08:10 +0000
Subject: [PATCH] secrets

---
 .sops.yaml               |  2 +-
 secrets/mindy-pgbackrest | 29 ++++++++++++++++++++++++++---
 2 files changed, 27 insertions(+), 4 deletions(-)

diff --git a/.sops.yaml b/.sops.yaml
index 0086acf..e665647 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,7 +1,7 @@
 keys:
   - &host_tahani age1njjegjjdqzfnrr54f536yl4lduqgna3wuv7ef6vtl9jw5cju0grsgy62tm
   - &host_michael age187jl7e4k9n4guygkmpuqzeh0wenefwrfkpvuyhvwjrjwxqpzassqq3x67j
-  - &host_mindy ageXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+  - &host_mindy age187jl7e4k9n4guygkmpuqzeh0wenefwrfkpvuyhvwjrjwxqpzassqq3x67j
   - &host_jason age1ez6j3r5wdp0tjy7n5qzv5vfakdc2nh2zeu388zu7a80l0thv052syxq5e2
   - &host_chidi age1tlymdmaukhwupzrhszspp26lgd8s64rw4vu9lwc7gsgrjm78095s9fe9l3
 creation_rules:
diff --git a/secrets/mindy-pgbackrest b/secrets/mindy-pgbackrest
index 9a80677..c7d9ad1 100644
--- a/secrets/mindy-pgbackrest
+++ b/secrets/mindy-pgbackrest
@@ -1,3 +1,26 @@
-PGBACKREST_REPO1_S3_KEY=REPLACE_WITH_B2_APPLICATION_KEY_ID
-PGBACKREST_REPO1_S3_KEY_SECRET=REPLACE_WITH_B2_APPLICATION_KEY
-PGBACKREST_REPO1_CIPHER_PASS=REPLACE_WITH_ENCRYPTION_PASSPHRASE
+{
+	"data": "ENC[AES256_GCM,data:eKRNy5UoUlvAhUraxQwVYA23z8+TRG/iKJRamOtyrBO+Xbgb2sh5JR7ALO8D1OzY/g6urs5/DJIEufD26ahwMiCiJyoVV6GP1/bBxBu2OYmsj6nq6f8RubEgk5zpBclmG/RhnSXVJ87XhfijbLkq1RGRvH460mUKHf4wV3xPVUk6LXxH99oaTpgRXgmC7XD+4hYSueWQ,iv:2sDqY9rZH9W8l5vPn+IfumLvPIBvTLX3hhbMRhZ0nac=,tag:eNnWLm65gp7oBHuwGsQa7g==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1njjegjjdqzfnrr54f536yl4lduqgna3wuv7ef6vtl9jw5cju0grsgy62tm",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5bXU3WGpwSkhzMjZYdFJJ\nVld5SlpENEdTcDlKMWIyS3prK255S3NEeWxNClcxNFZVQlNjaE45MzUyMTJxZmRM\nMGtsNXlyNjlWWmZidGh2dTdUVEZYS0kKLS0tIHdUaFFJeDZ4YmlXeFBZajhjSy9u\nZzhzV0NKeVY3a3Vpa05NanoyY0R6NWsKeRpVYArxCJwPx920fMJnj5ZP/dO+PLLq\niMoga8NEjvQxwuU0GJqr+QsPyMuKLXhFtg+MY+/z3PSuzkzpjp1XEQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age187jl7e4k9n4guygkmpuqzeh0wenefwrfkpvuyhvwjrjwxqpzassqq3x67j",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqYjEvaDhsWElLSnByMmdh\nWFNZN0xNY3B6bUVlRGFVRU1yOUE0cnBJbEZrClVMZFV4RUhRZTZOZXYyZ1V0Zk1h\nWVFVR3BEbTZjV2c5ZlJLZXkrN29WVE0KLS0tIEpPdy9GSFdhMDhhUzdhbDFsbFFj\nMXN2T1F3aWVoZTVGNEkrc0hyNzhZMkEK/JZhwTss217cfVB1GaeEpK5D9h093y5c\nDT8AAxADqArdIHGLQ+6Ar9GABKOLG1eyxztEH61/bj8p13Wdiq7voQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1ez6j3r5wdp0tjy7n5qzv5vfakdc2nh2zeu388zu7a80l0thv052syxq5e2",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsRUV2SVV3eHBSeGt2dTJG\nVk9uSUFrbStVWGVpTDZ6Uit0L3Z3ZGNVT1ZVCmt6MVJiaTBPZFRCWlZTRWk4LzR3\nOThubGNyazc4S291MGRHaWVsNjExL00KLS0tIFArYWE0QlQ0czlVZG80VUJZSFd4\nd24wVXM4SytGaHV3aVV2ZmRFaUdtRzAKy6b4gPqvgbxjeS34lljFmn9u0iFFG9qL\nb2qSXnpajXcheMvR6kN6XuTH1LvcKufZAHZZLwZ4iMiy8C+TCNYESw==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1tlymdmaukhwupzrhszspp26lgd8s64rw4vu9lwc7gsgrjm78095s9fe9l3",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlcytaTWN1bm4yWDJNVnVG\nY1UydWcvTm95TFNSOEJLcXFaVjIrZzZIQW1JCll2d25vckVGZVFCMDZyNHFLejB4\nSC9TL1YxWHFKQVkxVHNaT0czMXFiVjQKLS0tIDR3M012MUgxTXBweUJ2S1krRTNY\na0QvUzFrY1BsV09JZEs2OFJtaERqOTgKKNeLftgY7rpYF/WAPOoxdNXSCad9Axjt\nhuE6/IcyiK/Vnw4KMyL5i3e3u/rc8fhvqCiSw/PEAGDJ3kUnCNpcSQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-12-20T20:11:07Z",
+		"mac": "ENC[AES256_GCM,data:GymmD13DXD0LMI1g9Xu14QMpXSgjzsvdnP5CkqzLvt6rAwA1RqnGIBA+Hs8auYv3PWR6yJ6CTICKRqr024Z9OWI72TwYtX0tkq3KNgbLvK/EQgfFGSD2zPWfodHbxgEzA4y9lhcpsPSkXZv5WPHZ8e2Qdi9cD2aHiV3NZ9cjctA=,iv:y51r2EKQkesTp31FsjAzJifVRIhUl8jpMEsKARr4O6w=,tag:C3veoHsHi+ND8LBVG3vjvQ==,type:str]",
+		"version": "3.11.0"
+	}
+}