32 lines
5.8 KiB
TOML
32 lines
5.8 KiB
TOML
#:schema https://fnox.jdx.dev/schema.json
|
|
# StoryTellurX's secrets, age-encrypted and committed: the only copy outside MF's store.
|
|
# The HEAD VPS build and container decrypt them with the host's key (deploy/entrypoint.sh).
|
|
#
|
|
# Recipients (who can decrypt):
|
|
# 1. Elias: private half only in the macOS Keychain (service fnox-0x9497, account age-key).
|
|
# 2. HEAD VPS (185.143.103.191): private half only in /etc/head-vps/age.key, generated there by
|
|
# head-vps/bootstrap.sh. Revoke it: remove its recipient, then `fnox reencrypt -p age`.
|
|
#
|
|
# Change a value: printf %s "$NEW" | fnox set NAME (or no pipe, for a hidden prompt)
|
|
# Check them all: fnox check --all
|
|
default_provider = "age"
|
|
root = true
|
|
env = "exec"
|
|
|
|
[providers.keychain]
|
|
type = "keychain"
|
|
service = "fnox-0x9497"
|
|
|
|
[providers.age]
|
|
type = "age"
|
|
identity = { provider = "keychain", value = "age-key" }
|
|
recipients = ["age135dmd38tuyguzg2kx3smu0s5degx0t9k4nnnn6qdfkc5vjqz7cfqm0ed8s", "age1m2l2mqucf7y0nwl32lrn9pe6cel4hppn0j8qgdfx7wd0jndpwqpqmgljhg"]
|
|
|
|
[secrets]
|
|
OPENROUTER_API_KEY= { provider = "age", value = "fnox-age-batch-v1:YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEV3YwcFRkVUJhMkVmVGl4dFFheXRJbDZtS3VUQ2ZqckEvQmtUM2xaL2lvCmo3a21ybGd0MWQ1aEdtTzNobXczbkd2NnplYU5ycVhLU0JRdzQ1ZWxBWVkKLT4gWDI1NTE5IENheHFqbkhlaEUxQ0FsYnAxN3p0TG9EUEZqejk0cG5oQVFZRmZudUJCV1EKWWtKVTU1eDlSdnZCb3haWk83NEpLTktXRDRRbHB3V2xSRmtFRnpvcWJZVQotPiBWXi1ncmVhc2UgKkxLXXUsUwo5ZWRDdnZvVEREMkVNYmRkWjNKWm9EeE9Sck04Ci0tLSB3dVFuTm9HUFA1TGhUUkUrV1pFeXVGbUVPaCtWUW1WK0hsbjZ6ZWdGSlA4Cs6R30DeTl9WfvI2CDiqxbrLOacS6NrtnaFXnk+aAi5rzxMb+V5diBpGLjTFZupqJDnVfvuzYyuNpAZjftIHk38RBW+e60ytsE16Jio=:f73RKxbvd5y9Vx3YzZpujWF2dAhwOhE2N058DaJLUb87ciGE8zewPshtkp3DKRqc3RbwUZbRPVy40O+LrWeqa9C9MMcPIxQ21mc3owaRVPD40eIYjcSAAmxUeoDIYgJlBju0MqQ=", env = "exec" }
|
|
GEMINI_API_KEY= { provider = "age", value = "fnox-age-batch-v1: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:48ZlOLo7CxL1uRBTBpzNEbziNQ9V5Eh0t3rYSjwiJ+2L70Ik3UiUXoSNs09P3WI7W9n0oGo+btUHrkbtuNwViHFvZw==", env = "exec" }
|
|
NANOGPT_API_KEY= { provider = "age", value = "fnox-age-batch-v1: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:WuPMslw+VT3fxmSfzkR7MHC77PBO7EPhucY+Dft3hw6+obAHbOfv+vJGIsMuafgkd4wgseBtN3qzHrXjPtdX0cd1RKYvrY0m", env = "exec" }
|
|
S3_ACCESS_KEY_ID= { provider = "age", value = "YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuT1EzeVhWWVUrb2doVkM0bUdIYUVwSDdGWEc1OFdSL1lJQlNHdUdYWEdBCkZmMmFnaFppNFNLQ2NoSjUwc1krUS9WZ0toZzR4eHUyT0R6VWlPZDRjeHMKLT4gWDI1NTE5IDJZbmtGdWxIYjlxWWU3UTRsVm8yZUFsOUtjRHc3R2JvcktaYjQ3WTRGeUkKNHIweWtwNHdGeUhMTHNlQmQrdzF6RnYybVhxU2JQUThlYlNlVjZYMEJ0awotPiA7SEdAaUBmVS1ncmVhc2UgbVE7ay8gZ3FpSyleIHxZTTNbICRQXTh2ClhUaTk5d1IzaklyZFpGYXluRkM0Z2dhV2NBdlord2dWRytnd3Ruazd1S21mVlBkcFlsNDQ2QzdSMisyR0d4dEQKcS92bHo3QmphSTBJWXArTGhNZEt1QWpRb3N0U1F2VVZiSERHaDV4WVJqQVYraUEKLS0tIFRDenNFWVZLeHBVenBOQkJrOHZCNFRZcWpXOEk5alpMcGd2V1REb0hEY1kKf/8nktAgKUU6uPPMal6RVJXvi+Yr0mQdaZ0d9WbJKYw/jmCZAjDMf/moncaKVIF8U+OSNQ==", env = "exec" }
|
|
APP_KEY= { provider = "age", value = "fnox-age-batch-v1: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:WZ3kiTEmossCBtwLA9ByKb8YDe6AFj7B+B6RhSEAFV4PpVDGieqoHuN4eFXtbE0lGuEIqBRWNrjGsFV0xv6InfxLW+mOnZe1wOYa0UTsuCa5QOTPvjKRqnBxd6s=", env = "exec" }
|
|
S3_SECRET_ACCESS_KEY= { provider = "age", value = "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", env = "exec" }
|
|
NODE_AUTH_TOKEN= { provider = "age", value = "fnox-age-batch-v1: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:jssbvQ27KPMA/T363w85pXtzByu6x+UpGMDVqXM4Uu26y5K++RVflBllYpVq8ZgmV/SXIj/4V67M7ei9aP+Z4D9fw+4=", env = "exec" }
|