separate keys per app

This commit is contained in:
azykov@mail.ru
2026-08-25 21:25:40 +03:00
parent 07fd7110e9
commit 5cabacee84
21 changed files with 136 additions and 109 deletions
+8 -8
View File
@@ -4,19 +4,19 @@ metadata:
name: immich-secrets
namespace: photo
stringData:
DB_PASSWORD: ENC[AES256_GCM,data:ln8BOjE/yW0PCi1IVC3fF2UnvdO6CDjMMQJaMu/KXgg=,iv:nLKUtDjsM6Hamb373aDrHId/vJ89ERIsE3sH1ltLPN0=,tag:SoA/XtpWmR27OWrQsVR/EA==,type:str]
DB_PASSWORD: ENC[AES256_GCM,data:+bJ/+NEQCT3ZEqjnkzep4OsbLkJ9gyLZmGxCpoww2Wo=,iv:n1sLYgLl3zNZBdjMBhIrbSv/qHJFQ/nvZfBknFAUdug=,tag:DFnoc5K6XvHngVIrgJlM6Q==,type:str]
sops:
age:
- recipient: age1wmm8qrqnjzvd5nkraed6ylrsxlpn3ru7d7zettdudj7y9sg9dd2su0u3mr
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5ZVROUjJMbVhWTytjcFFC
bEwxcHlQcEVaaXA2YUUrNDcxbGdJY2dNV25FCjMvLzY0M3VBY3N5aC9mbTYxUVhx
UDlYQWR4VE5rT3V6UHQxNk4zL1lHRGsKLS0tIFRkV3BYMEdMVEtwV083RDBtTEV4
RkN2THlYMWZ6MkR1TjlFYm9KYUI0STgKhnXosf9d4hRBYW5byrQv6+kLlrmpfc29
JMkML9MP0o+waMYih/U8DzQEI1An866ngPZYJ/6a3sYXkpvk+ssXUA==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtd1hFZy82d0c0RXZMd28r
dWs1VWNlVG9tTE5WZDVLdGpFSXhuVXQ5anprCk5LWWMrWUVCd1N4Y1JENnRyWExC
d2VRNDJON2RzSHRyMGhRdmMva1NNY3cKLS0tIDNML2Q0YXFRMEs3V3prUkZYSS85
MWRGa3duNHgvbjNvVnZLOXpYMW1mbGcKaN7h3W0YKsRjnyk6P9+bziDy6If5xLQ8
kxFJf4CX9XU5jgYXqw2UNqRDusphclqfULUMRaEzMJkkPhd1cZ9PvQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-08-26T10:31:12Z"
mac: ENC[AES256_GCM,data:7ssc4VqLST5FUHiZ+OEBAm8tOZnlDsU8WvyLRx6MVhR2+QlIBO89uA30lOb4vJIfmZTSw3eL9yxYaqR4ZLrM4jWaNA8tq/6eUkOrsOv4rk99ZVV/oxPXmaszRtt3S2ud+eyV8tSsQMuTkjDpYTpD/BgGoTnMPqKK7aiCzw3dpj4=,iv:fObkRF2+5AoSqXJTiqDAD4/JDhq8r2ePB1Yx9+ocCKo=,tag:Mrt5cb2AhpSNXE5Lu2EaBQ==,type:str]
lastmodified: "2026-08-21T12:23:20Z"
mac: ENC[AES256_GCM,data:vGSUhl73AIQr1Ld1SHc+i4GpvOc0b0j8Vx9DmoRDjNs17TQSfmfulEZwIua12P5DHIz36P9yqggHfSyyrrEoMjfaUSTIDxCIGGvsfTl4vBt9Vis0e2gALaHtAgWZwxr5QMe+OP1tkXOZoX9E8VcoBq1ULvbIjqsPs2uxPVKsEWk=,iv:1exDUqurlFdBt1eZYWWMlkar75HbTLZ6RZelC0RsYcU=,tag:A0IhJHjVum2HBT5RwHo5qg==,type:str]
encrypted_regex: ^(data|stringData)$
version: 3.11.0