Move secrets to sops

2022-12-27 00:59:29 +01:00 · 2022-12-27 00:59:29 +01:00 · ae3e6270bb
parent ce9a22caed
commit ae3e6270bb
3 changed files with 219 additions and 5 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -118,6 +118,12 @@ creation_rules:
      age:
      - *auth
      - *polygon-snowflake
+  - path_regex: hosts/bind/[^/]+\.yaml$
+    key_groups:
+    - pgp: *admins
+      age:
+      - *bind
+      - *polygon-snowflake
  - path_regex: hosts/blogs/[^/]+\.yaml$
    key_groups:
    - pgp: *admins
--- a/hosts/bind/default.nix
+++ b/hosts/bind/default.nix
@ -38,6 +38,12 @@ in
    };
  };

+  sops = {
+    defaultSopsFile = ./secrets.yaml;
+    secrets."c3d2-dns/gitea-token".owner = config.systemd.services.deploy-c3d2-dns.serviceConfig.User;
+    secrets."c3d2-dns/ssh-private-key".owner = config.systemd.services.deploy-c3d2-dns.serviceConfig.User;
+  };
+
  # DNS server
  services.bind = {
    enable = true;
@ -84,16 +90,14 @@ in
  ];

  # Build script
-  systemd.services.deploy-c3d2-dns = let
-    inherit (pkgs.bind-secrets) giteaToken sshPrivkey;
-  in {
+  systemd.services.deploy-c3d2-dns = {
    wantedBy = [ "multi-user.target" ];
    before = [ "bind.service" ];
    after  = [ "network-online.target" ];
    path = with pkgs; [ git nix curl openssh ];
    script = ''
      mkdir -p .ssh
-      cp ${builtins.toFile "id_ed25519" sshPrivkey} .ssh/id_ed25519
+      cp ${config.sops.secrets."c3d2-dns/ssh-private-key".path} .ssh/id_ed25519
      echo "gitea.c3d2.de ${lib.head (import ../../ssh-public-keys.nix).hosts.gitea}" > .ssh/known_hosts
      chmod 0600 .ssh/id_ed25519

@ -102,7 +106,7 @@ in

      status() {
        curl -X POST \
-          "https://gitea.c3d2.de/api/v1/repos/c3d2-admins/c3d2-dns/statuses/$REV?token=${giteaToken}" \
+          "https://gitea.c3d2.de/api/v1/repos/c3d2-admins/c3d2-dns/statuses/$REV?token=$(cat ${config.sops.secrets."c3d2-dns/gitea-token".path})" \
          -H "accept: application/json" \
          -H "Content-Type: application/json" \
          -d "$1"
--- a/hosts/bind/secrets.yaml
+++ b/hosts/bind/secrets.yaml
@ -0,0 +1,204 @@
+c3d2-dns:
+    gitea-tokens: ENC[AES256_GCM,data:7zI1GzZcrR7yJgRHOOysj+Var4SE+X4L7rOFgUBOFpD+57wYZWWMEg==,iv:M/8LzdJtK0usgG65pFxaUrkg7lgCMmsN2bwfkZihCOo=,tag:Fk4Gz/OtX/bwLZ5TA+QS/g==,type:str]
+    ssh-private-key: ENC[AES256_GCM,data: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,iv:zk8xQKNpdxgc+0wz9nF6T9nEOYNock3ieec+IITDxUA=,tag:lr/gaMyH5AHYUkLlGjUiCA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1hfzpctkk5tz0ddc86ul9t0nf8c37jtngawepvgxk5rxlvv938vusx4kuc6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsZ0E1ZmEzWmxyMlRQbmZn
+            U2E3M2JZZmduS3l6WUt2cVZxdXorSHZmdVV3CmRKNVpEalFxM2xEQ1Q3bjNmSUlX
+            MUtRQWkxL1lTTWpxQXJobnViLzhRek0KLS0tIERSdU16NUM5VGo4U3kzZEZQc3o2
+            OGFiQ0JQamtrdmxXN1ZCOWdJanhMdDQKptgLpi9O+bf7byxo/3i64C1AGiSKugzG
+            3TczyCeBJeRqqiC+E8dClQtl7jxn75iJM4ejIc2mJ+h0M6Fg77Qblw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsRkY2SG45dE5ieHJDYmpU
+            elBydjlJWWRSVGgzNVNUWkdpMVM4VVl5dlRNCkFkZ1B4NGdNQmNPcnQ4ZlB3Nit4
+            aUk3cHdROU9WRy92K1JsWU8xb0NPK1UKLS0tIG10L2J4VUNzY2pWNW0yL0xWYUR2
+            VCtjTDZrMXhEemtSNTdDQ2d1UTRPQ1EKMcWrKrnlnSsAuo1W/ZEuMph8MaBYFlEM
+            lKGvxHPxM3jwrfZHS1HYoOqnZuQpjL/1yih9Q3EaloSAb52wpmlsHA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-12-26T23:57:24Z"
+    mac: ENC[AES256_GCM,data:UXLNs6O8jP3XbIFrq2pqZUrGyw9nfzQ7diKSKv3wfNnF1n22YxM59fHo44Ey0jNTOq7eCApUw3+bUER8E4NA7cv53MFTk7f9EsCGD4AqIzswsqeDRnRlEZ6qcfsUmt27NoKYsv8OURbZQJquPnCR3FILWa1oHojmA0JNh0ngkwY=,iv:O5D7SXTBMmxkA78p+j7WpGJ7jgCl4WMFB7Ljyz+9pCM=,tag:S6QlEGlHGikckamViNxiwA==,type:str]
+    pgp:
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6j84+xkv3y7ARAAkTXOCz20XYDtTC5Qee8a/BqiQZ8NHj+1a5AH30YI5zsb
+            amP40SpMHHlooQ3BHBt7a7Ai+4SxZz11kc05MGk+waMTFbETl5utun+LInnT12ND
+            7jtxgavDwfTCQZqQevFs0S3DMBo0qQH2pX2HPWm87oiDMbQl2H6waJF2cW2RQ0N7
+            iX4A6WbIOW6IWBU7mNW5l4uAoCBXOcZtKVGHdZ7+7ExjpcEO07r403JYkdgBSHrB
+            xw1MKGGqOhYYHRJ8SrSkNQrGHpjR+mnon3qK0Prjqbwu5NBNhXTC1Qia9PGgapCO
+            Y8eHwbteQ8hVZ1qX2UYs/K/MYfsZOwgj3+sCnYAuTPchFr7UCHGQP+8XEOz5JKme
+            S62MkNUY31TNEGX8q7O/Ppwi06c7xSwrCZDJpEfsJ9rEsl7WuPGohDarp2k1+XzQ
+            oaghY8Pj8qhmIF1G1tt6BXbqwpschOSUgZreX8qXjWF9P5IAu3c5gwG7IRfoQ8LG
+            Ed+xYAZl05EDxa6adTsZXu4osppKbIQnw/8s/g20Of9luaxEiekyz0togr1kCug2
+            9wYi1n381IKu+j/zzQrvmrCf9+fH0PHCT4Yw6CcYiFh1KtIXDLSenLoDThMeAZAh
+            qLcQSHNZAK8BYRYDCNBvrX0olbDuFApIb+5Be+RYe5qC8hP7/kg9c3qA2x61tZzS
+            XAEYiTX34lQUnTaTkeCa5htBh9o7n42S6cLCcbJugKqvwiTLQ1MQzKgdjcI9qw0D
+            UqjjMHZGvPVZEj63gfsREgkNF+y4fl4HtIe2GDbtnDc6d/HRfHq/sklnUf1F
+            =o5jS
+            -----END PGP MESSAGE-----
+          fp: A5EE826D645DBE35F9B0993358512AE87A69900F
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8zMZ+ak7y/zARAAkOCYltg68fdOonrUUwx/oATvcd+MqMMAiTSIEQdrC7oS
+            yzTkUmV5e0CdgTMBajwWhmEzalmgXG+LRPqkVjBlCeYWzTnam8qyJav1N+MSZAKU
+            Tqt4aCXHP99nKUWHgKh1zwd9b/Z1Sn3Be1TSZPt3N2ZDuRI/fdbxXkz9uILkbGxm
+            ccObtNTvdHCFi7IlVygaQwRbtZFL1NL4ZMYGo12Jmwk2rpJ7TzXQcQmPCVs227KC
+            iaOSCIIZ1Hk6dzsSDGtg9/g5Oi9Z5nmkNhw7kg4kITevHREUNXceErJwdzKn+Pzt
+            md2/CnwzsMBNFmFu8kHsbuSJOAt0eoukE6RdBN9g1RLo5n+FklXL8JgQM1ySRbmC
+            QQ91UasUtDX1OhVvi+igLf9FFzDPiZERdW595k8w21WUC303dwsEACTfb1hhahMc
+            ER/FaVl0ix3fPCEZdYbBRC3NzC61nG/fJGudLKRy6c123AP6I18tEt043S41hPiA
+            wSM2G6oR46Ozvt0aC8nPK6/QBzlMGpIrzd9T/go7S3Lz8VSpTsZMawSlXtU8YeiO
+            W9GYwsCETfYPHTsVclyQOX5BNzEOiqnd2F0y2CJRfwTPSJ2PdfJT/In6rhO64xFS
+            23WAIXvQWMW+VozuJOnsjwzIyzt18769y8xmF4wVjXDXHsnC7bvzuoy3yi55pJLS
+            XAFwDREiZomYNWGNSf4sLnv8co8q+CuRtfQ5gSQ2orROOWOhj6rmzf89+5oWew4X
+            tnEgV/KuFFvBfnLoXeoMYed9VzDMII5dMyU/qQrhWTTaZsqdNknhvbwnQ9Jc
+            =MckW
+            -----END PGP MESSAGE-----
+          fp: D4E89C6A0A58EE803EF708EFA9B23715F7AA3F1A
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA45bZkLXmBFpAQf+Knrk/azuhzbIwM52J09TDIUEXlJWoko0PZnLIq9zvRtF
+            00/cLGEorZ2nFGzTIMjgkgRUDyZuj/VnpqXppLxLaL0sfXEP6OAkadaVwepqDXV9
+            QciJHWqoV6Mp14U4v4CqqNJkTR4Bv5sLTQfxy09MG14zSy0NS3kR5qPLXq0qV2/L
+            qp3OBb+a2vgos0lZ7677g3ry0bZYvnIxFSHlK/CuhtmDD3BoOg9EJ8s6F/7lRWjD
+            EaaPUL8WU12XxhPpjVEURRMLB6X4DQ+L5ZYwJe/askJmU3XoO8l+9v78BdUTPVdu
+            GcFFxN+1XrIUfDE60k3QzzKwV6p0i3DolbDdzcMUZ9JcAb8sj8XqBbtrHpBgYvXG
+            DHE/3f8r6Jz638dymU5anlE2Qk+J5KXyz5dD5ILQZdfDWN7nK8E61FVOxZkGBjU9
+            J1yf4yJghK2DAw/0NUvzyj/br1fAp9Ov6+f35Lk=
+            =FSk8
+            -----END PGP MESSAGE-----
+          fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAwMCBBrc/JA6AQ//dxkQXte+0dsGJW2n8/lrrdw/f55UnPvaYJU2vM0giPq9
+            fjysXEL676nrZ70OGLPPWELCtJfhv8OmoBm0ONUS/dLca4ljZTUccNMMzVU9BC1Q
+            QiULHsN5JN2SUjNT1TyboA479FjolNWFzqQ0zJon/jQ/qX7ByyPhXsSBr9/IQCvP
+            GO/ZdUue4zsvffLc07AWteZ4xtfCqS1dsCw6XN85R5wcaNxwRZyFS+vpoIJNBQHS
+            hHDy5PfwZhDAtcWqD4Ikpya7bX2IhCjoV6dmkzF92E3PusRg6s8z6d+7Yys6rGW+
+            9FmVNoAy8+h6zBYnOnH6JxCqwu5j1HvzO2+H+mQp8W9B85YktWNwxESHS3lae0t0
+            y3VZ2JTVQTuolzPIxV+xnQb+4Pr0+JYTi/NUiHGjq4ZVQH2keUrFOwB82udebtHi
+            0LvL7CMyzOC17N08MRY5rGrEjqgjPpz97IgMYshUt/uUoM0bUw+OGsDcTTTo8w7a
+            eiKFlgjFnOHPjs1nAHDQsQoJVBuA+GB0MHwEWx0gkaifM/2cNZD6JvuzB4JAcaAL
+            JrmgX4dWDx9ygaoaLq+N+JD8lYJiC+p6UlRPoxNnLdbecib2ecdRZjoSHfKhvIA8
+            SUecMFZhPv0Erc+QnpZ7AtF4EN8/yPllNAnde58iJuzg2535z8xZgb8yFlNAZizS
+            kAEfPMzgVjPrLO2FF4vMP9ns6ZCKYDnMjOjuur9xjJ4/gD60ZjQvmw0Prh6MJgMF
+            k9Tc7EXFNIjRTTyFtpM009U9jNYqpv6vmBaTNmmqXvxlKOejznAA1npufL6Yoz1U
+            tXlMxQBaoyXL053tUbtVvYfOchM9zdbVzh/O5af9CTANaYOsx9YRziCsK8MM9VRg
+            4Q==
+            =ULpF
+            -----END PGP MESSAGE-----
+          fp: 4F9F44A64CC2E438979329E1F122F05437696FCE
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA9XEenRNYVGHAQ/+KcqYyw8lXqXsEBowCJu3VX/p93bdAja1UpGc/VfdWmIb
+            NBHPfoyCW4s1iYAuhfaoAjSyNPNoUWBK2Mvk/TV+RiG3rD6rCf+man3U0Y2ndYeh
+            ZX8tK5rQfNIYlPfG9iGNCPQ9QjbmntaeOOpXOmLfpVfmJ2m1VSolZOSHEqa74DNq
+            RFtE1IAExPS9veQ9lLEUhaB9c0730jjFVsmJG/BbadHC/c7pGLD+MEK4TCPa5CDe
+            nQNp6XUEVnhGkv5YkZb4U+I+3cpvgsl3ATEuqmdp6JCN5GHt8hkXd6e+xJlVFpSY
+            krWJ+mdm4GAmtEzbRJezl81EpgJK/PKRmXo9oPqDGbFD7pNJMmJSGdm0VFCPlDOB
+            5MhzcK6VVUPgDnJnR0dgyQoqcrsCl0vmDiEXv/tBJPOzh6NhlLOwAhM5LPcDwjvk
+            1hcObTkFsr8892QB5M+GigdFcPebOZxSXEq1wAqx1e9im/Fa2AfHuTGQlvxJEOz/
+            wlIuZG+p6x80SUnMXDKxJijQrTd8FV3krbgZetRivDxqmGX2CPfN2V9p6vTU9usE
+            jLJE9J+/4229tPoPWUPTknio0trKjXryScwgZOn/cvRuUDm6WD6/5cFoQx7UUXhI
+            +udNxU+ptKb4SAxB31lyvHIoCplZju8I3YflMMqUo5kuNqhuX7zPJJW1Cqw8aPLS
+            XAGcP7WByNElNFnt6Ir9k++X1gDpBcVBIZanAvYg7txCfulOvsTh21Yv88aZMry3
+            oX4TzLFVwgZHkeK9FjHuywLmFY5PzhQ74BV5pVJgLA89YkJsDC3j+PYzrQW7
+            =eGO9
+            -----END PGP MESSAGE-----
+          fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcBMA/Z87ylQaotQAQf/Vs7w7rpFGW/5TfVP3PYEpNOdpC2OF4gwqnn64a/tjFqC
+            ywuilusJwND64lsGQzx0U2V/oPRIpny7J2d0MbKkI8lRN2CmuLKjEW1agAzMAbDk
+            DGpgKgPM17wQotp7nSFElvYbUpLM8bCTLSDAVKR7q06OP+IPNFhn18TEUAKYFeLu
+            S0IqkmD+vyyBoYFWJlKe8VAFa+9nepqeYh/DujMAcJFVqxsDVHFrAQiW32ZA+yGX
+            QWVObtI3KIdtsguTRtX064kzMqpAwNP6nC7u4FMSpwzVgtiS5NiQJHAxufFtHseQ
+            oebWaevfVYOARJ3X3e03gKkQkwTdaIfyYRE7nLPkidJRAVGY5W+BC3KQo0Qunc9U
+            Msyy9QYCU3RTjGGX8GzJfWT9Hm3pXaDIq7IO4UrHsfIYngO8IHwKXIbx95cd0gsk
+            o3p9YwOmYDX6l0+iiNJKAnZS
+            =1seu
+            -----END PGP MESSAGE-----
+          fp: 9EA68B7F21204979645182E4287B083353C3241C
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA9qJIVK2WMV7AQ/+LwaUGyldQleNLfov1cZS7lCJaZgI70aP+s5eAIbmjooS
+            CbsTrY9BXd43cW+lwZfWJ+APToWdjA/hZ9laGFfO/1bxRrpl8wDhjuJkM9bTYa29
+            Cabe3zupom2yA6qC5MftZ/cxShvgT8bE7KcTNi4GbMutjcz1PpKMkWs6at4gTJWn
+            wlRr570fEPK0NpkmAfn8DgZLVKs4djW7Byyzmqq0VxmW0txjvG998ghreTXojqOa
+            CHk2k8tHrZAR3qvBEuDBAGY13EWK25KvHkBKnl41z6xp58Xc/ZFa9o2/kOW41iSK
+            l+P9DI+v/qOBlqEoGsRewI30Nmkqm1z0TGLb6yO0qKrb15YwWWyit9Wf+RHpeVLa
+            AwWwL8sBNoDmBfozwNcWjT5dQ/ynipZ3E5TdKaBA8mjqoqu+1RDaP7JoLFv6/8d5
+            0fuN8vg8IbCpVw9NhXHQMmbqKcIeJ57xb0EQ4hdwQwTFs06yS9FHWUhUcT6165v8
+            OyQN4mN6w4sZTvKrRLQ92bEHMSS7HKBWHwVPzotNHZqATYd2TPaAp2uhd4ptrpA1
+            t8lwmPwSa3GYjklkVwR8HzrsQmNu4fiSQA8oVKqG2x5whg6g2ScqAJJHgfcfNG6P
+            9we3zYRdLTeyLPdxKa6XPUbdx04KRExDywaX1aYW1UHGuZUYId9d2TU0dO8qzVjS
+            UQFl9rewNQu3VwtE1GLScvRkCVz1pwfTKIiY32lj7yrdSiEGtrRWXcHDfJaNgM8J
+            wfhRlioPpgQ/stbynk10xyhar2SDlt3VNcl5K04DR7sTMw==
+            =oIfU
+            -----END PGP MESSAGE-----
+          fp: 53B26AEDC08246715E15504B236B6291555E8401
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA/YLzOYaRIJJAQ//QS6tZUjaRSJAj5nIK8Z5ZHsVoQ5OyqtvySAI7h4uTBHA
+            FSmBrixb3OhjaaF7xxkebx0Hq+H/03sHu38jJijdC55XT+l1gyu8Uuob282qU+Ii
+            Fdo0Naub1e46sWwwH/n7h3CvVqNhobjvcZcvEG88F1s/uNjXG8rJ1DubbpoKFIns
+            6jtfElex31WDaUU178NaNC0gCTDGYK/caEg9GhkHpHHnupdYkX/Jqc+lx37yt+1p
+            uMLIS8CkHPHp8t+CwyTlPyeuDgTsAK+J/f5mP/KdD6z5FIOo76lz2n20qSzjFJDe
+            FDh46mbUi2OtUzpObRN/mcYDz5HByqO48j958cTljGF7t1oN48ELrVPc0nWJnxY/
+            SbER2/aR8tuO0HsHq0UgsS4MoXCBwfH0GIs0199vPHSWQDq33E5f4cMJxV1bbTWu
+            kJVQYBPFGWEiaavcy0paUtHvbplbUtbbRfmpOqszUMRUztt4CjCAD98hdecUlWZd
+            3cdMyldySiHNRG9nLh9ZIDfiXKijuVYRXA3aa7EcSo9/Di3wycwmJ+M4Mf2M5S97
+            /LSVGX6IrGKCbbQoZFE5EVF7JkN887d/Czp8OEN+y3sPDnKwLBcYBc1j5ZDk9ZjT
+            5DHC64vbyw8cq+DYB62V/jIuHxPqHH+s3mjsPHbR4N72/3LBoZtC62xtYCad1SfS
+            XAFriq1K8ZEqZ++w/B9afOc+8Qx/48PpRBv0xTOYxJPUKARdLa9XfDAtryOdivf7
+            ckwm4BJiIQ1kXwxAWUwGkdZDjAMQgArrKhMK32jzTh/F1B5ZqbIqnbPuZmkn
+            =SGUJ
+            -----END PGP MESSAGE-----
+          fp: 91EBE87016391323642A6803B966009D57E69CC6
+        - created_at: "2022-12-26T23:54:37Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7zUOKwzpAE7ARAAjDbi8Rq7obP+Cpwrfk4617JlZ38zu5n08ac8hRpm+QrM
+            lHiMx/4/ew4fMndKNTMJzchbgeBhkU3zjDkgSy4KOMjZ6I9WuhRYxHLaWBX7EtZP
+            I7+KnOinUtJEOlIVaoecsJrrBLCjta4vtu6KkXsEjZ7dYin+p2il2cDft7bgIoYu
+            WfDs3XKjjOTNEPNfxrUrDqy+E4P0evT1A+LE/uKgjkrjVTQrUAbjY6vNxU+BGN9q
+            8VELiP3Xk70i4FBRFjwofi5JygSej+ycD/fNi7OD8d0ciarj+7p/KnkBRTJelJJA
+            LSjbX7FJBs539gLUhpn3uqRuyvBMGanjmdb3ZB+mMNAdXVO5pt7zbPHXqAitvaoF
+            HrQFVOg42jlV3TRmmGUrfP4FVEpogbcSAY7d2BV2MSDFktUlQlY1RwuCXqyuwp45
+            ZzkfhL8coJN6TU836DbnC6wEwpcFXZvGqA+T9xbPaT6SUt5Wg2MTzaHe7siRsifQ
+            ZZ7vAHD+DdG5OHiR6loiyunDhyfWmUtOaOMGl982HjvKo5BOHR+93xJWAGwWZgA6
+            Y2TEeh8yzDCMckhKNx23QoMLS4iI8WlwnU4xeJbBjFuGv+XZzoHUY7EiRK13lWlm
+            wKQiZlwI1wW4Lj3ae3lqZqv3oXTOEulY7/4BOCUvZk2Vzdl/m6QEBG4folHlkZfS
+            UQG3cLdWCzWHoJgIf180LHKH4ImQkQpIdSViZXE6dufi/TgbNuCLWaOJ8T0lB39Y
+            I5R0/fAyCoZPpbUHcyTmQXfN2KU+T0k1/xFRdcw4sP6q7A==
+            =/UDl
+            -----END PGP MESSAGE-----
+          fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3