My Nix flake for both my desktop and homelab

Made up special secrets for Jess

+33
+6
.sops.yaml
··· 20 20 - age: 21 21 - *desktop 22 22 - *nucbox 23 + 24 + - path_regex: secrets/jess.ya?ml$ 25 + key_groups: 26 + - age: 27 + - *desktop 28 + - *nucbox
+27
secrets/jess.yaml
··· 1 + special-secret-1: ENC[AES256_GCM,data:aBPP4A==,iv:genP0UV6gAyD94xVSUhFSTzoI3xaPUMuu3PW1olYuLc=,tag:dPydFpjMWSiShwjBfZwb3w==,type:str] 2 + special-secret-2: ENC[AES256_GCM,data:XvXm4Q==,iv:XX1FOG2eZvBThWyr5MvyK7cnM990XIaR1L2MXHsptZE=,tag:CmFRDZx9maX+MdZSK71F3Q==,type:str] 3 + special-secret-3: ENC[AES256_GCM,data:GOT6vw==,iv:VsYfTmnwgX0PBgxrW3utGwtbSoUL7b4pa9MraC3eXyQ=,tag:BTQEue/XvZWYLSFicV5Gpw==,type:str] 4 + sops: 5 + age: 6 + - recipient: age13d6egar7w7hq4cagemfu766p9g7l9j60z5afc6l4lt8w59kh5cfsh6ceal 7 + enc: | 8 + -----BEGIN AGE ENCRYPTED FILE----- 9 + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtbHpSNXBaQ3llbnFSK0Jl 10 + YTk2aGhDNjNjYkwwbnN3VzlzdHdSNTRhYUFFCllQT29jVmJ6UjF6aU15MXR5VlhX 11 + bHFucExlOHh3K2dZSmgwWGQ4c0lCbjAKLS0tIHkvNmJzN2Y1cVdIWVdERlRXNFBs 12 + V1pxWnFQbW1lZU1ZVEtJbFBseHZMaHcKFxLS3+vWpDnIzRur6wrBHZpt4S10TIc1 13 + ixyV8TgXbYsejn8lHTf50VHsESRdbEbEbbndzKjiQt6wv+Ov0xxs0g== 14 + -----END AGE ENCRYPTED FILE----- 15 + - recipient: age1t069rtmyfy3qvvpq2evnrtyhjx8ylc985cfagh97972x9y0uzqqsauagfl 16 + enc: | 17 + -----BEGIN AGE ENCRYPTED FILE----- 18 + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRa3ZrNWI5aWtEV05JNzZr 19 + TGRtRy81V0U3bXVEV0xORTMyK2QzTklFdUFBCnZPUHAxQ3dURW1JTEd0MTBFQ0oy 20 + dWJuUnJpbnpYODJwU2tqb3p6Y3RkMkkKLS0tIFBQZ3o2MFdqQW9vTjhKRGdMMW9O 21 + SWhsMktQS20wdk1vbXl2cmJzLzJZc1EKsUw6Jfn/zJApUBpeLf1hvyMQFYbiwMRs 22 + AevaOQRCGJ9AQfJy7ktXyDqn2W1Slz/Ngfj+9pcljwQnepdUHkqjMw== 23 + -----END AGE ENCRYPTED FILE----- 24 + lastmodified: "2025-11-03T20:30:57Z" 25 + mac: ENC[AES256_GCM,data:Etnv3Pit6nM0GZTuaaBu7LCVcaNPfVve/q1EjPx1+n//4flUpZ5BkcNo1gPJ5RpzWvg1bTFrMvuMsR20qsLkTJkitifGvg+/gFNGDdmNtDnK3afEhTmrDZI4czevM3tTiiwi4o/68rZMBPwIdr65SlugilW8vrnnxfcTa9VyGNA=,iv:yneZoPoubFMht1XL6s+OKQqnF79IM2XV6bfDF0ev1eQ=,tag:fXRtfzXuuHX86hFKNWGv4w==,type:str] 26 + unencrypted_suffix: _unencrypted 27 + version: 3.10.2