3 Commits

Author SHA1 Message Date
5e55c0e277 encrypt crowdsec bouncer key with SOPS + variable substitution 2026-02-20 00:17:40 +00:00
51bcdebca8 feat: add SOPS encrypted secrets and enable Flux decryption
- Add .sops.yaml config with age public key
- Encrypt authelia-users, authelia-secrets, vaultwarden-admin
- Enable SOPS decryption in Flux Kustomization (gotk-sync.yaml)
- Secrets are now safe to store in git (encrypted with age)
2026-02-19 23:20:58 +00:00
Flux
b38b383ca6 Add Flux sync manifests 2026-02-19 20:46:12 +00:00