about summary refs log tree commit diff
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2023-02-01T16·35+0300
committertazjin <tazjin@tvl.su>2023-02-01T16·39+0000
commit8ed81cf755bd7129a99c1409dd2da496c13cdaa7 (patch)
tree351b997b9ba12ac6536e8a1e0df5e69ac88f4dcb
parentf5ccb65f26b18e576d1eb50e4a981230adb9101d (diff)
feat(ops/secrets): add flokli to terraform secrets access r/5810
Change-Id: I9ede20028560f2da0fef89dfe431609c21bda51c
Reviewed-on: https://cl.tvl.fyi/c/depot/+/8005
Reviewed-by: flokli <flokli@flokli.de>
Tested-by: BuildkiteCI
-rw-r--r--ops/secrets/besadii.agebin1173 -> 1186 bytes
-rw-r--r--ops/secrets/buildkite-agent-token.agebin736 -> 743 bytes
-rw-r--r--ops/secrets/buildkite-graphql-token.age30
-rw-r--r--ops/secrets/buildkite-ssh-private-key.agebin1166 -> 1194 bytes
-rw-r--r--ops/secrets/clbot-ssh.agebin1090 -> 1162 bytes
-rw-r--r--ops/secrets/clbot.age28
-rw-r--r--ops/secrets/depot-inbox-imap.age29
-rw-r--r--ops/secrets/depot-replica-key.agebin1162 -> 1208 bytes
-rw-r--r--ops/secrets/gerrit-queue.agebin960 -> 853 bytes
-rw-r--r--ops/secrets/gerrit-secrets.agebin895 -> 913 bytes
-rw-r--r--ops/secrets/grafana.age31
-rw-r--r--ops/secrets/irccat.agebin880 -> 825 bytes
-rw-r--r--ops/secrets/journaldriver.agebin3228 -> 3202 bytes
-rw-r--r--ops/secrets/keycloak-db.age28
-rw-r--r--ops/secrets/nix-cache-priv.agebin848 -> 786 bytes
-rw-r--r--ops/secrets/nix-cache-pub.age30
-rw-r--r--ops/secrets/oauth2_proxy.agebin935 -> 917 bytes
-rw-r--r--ops/secrets/owothia.agebin754 -> 838 bytes
-rw-r--r--ops/secrets/panettone.age30
-rw-r--r--ops/secrets/secrets.nix8
-rw-r--r--ops/secrets/smtprelay.age30
-rw-r--r--ops/secrets/tf-buildkite.agebin973 -> 943 bytes
-rw-r--r--ops/secrets/tf-glesys.agebin874 -> 959 bytes
-rw-r--r--ops/secrets/tf-keycloak.agebin1001 -> 962 bytes
-rw-r--r--ops/secrets/tvl-alerts-bot-telegram-token.age29
25 files changed, 135 insertions, 138 deletions
diff --git a/ops/secrets/besadii.age b/ops/secrets/besadii.age
index cfbe27b972b4..50c2d1442def 100644
--- a/ops/secrets/besadii.age
+++ b/ops/secrets/besadii.age
Binary files differdiff --git a/ops/secrets/buildkite-agent-token.age b/ops/secrets/buildkite-agent-token.age
index aef7b142b68e..66802310bbca 100644
--- a/ops/secrets/buildkite-agent-token.age
+++ b/ops/secrets/buildkite-agent-token.age
Binary files differdiff --git a/ops/secrets/buildkite-graphql-token.age b/ops/secrets/buildkite-graphql-token.age
index e656a6e04dc0..6ebf3efca7dc 100644
--- a/ops/secrets/buildkite-graphql-token.age
+++ b/ops/secrets/buildkite-graphql-token.age
@@ -1,16 +1,16 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw L31em0JneG6XJikTp2LlYLSMDfsbDWjrNgQPQimIqWk
-3CJid3K/8RsE4cYEeZpqqaTmggMKH12GCDyalQMaK8s
--> ssh-ed25519 zcCuhA LKq27N4Hx8OQ3eu0TDdBiXO0BcOdSfRZO0YNNG1Y8xE
-PQjl1SErWej6e7jwsddoj06TWQQwp2J/m8zvxR1pRhg
--> ssh-ed25519 CpJBgQ dRMHEzXCpKPppncOBF4AmOYDZOSxZn+ta0o2H0zyAT0
-qNQFHL0QFxGlm7ZYnJ0H22iyVN3Ya7KYO596j2mN03Y
--> ssh-ed25519 aXKGcg z31fIwcokphDOcPLNfBZB3ZN9nzG71pMmC68R60nWnU
-3U32x1lxd7brCQj9V8eglSzQ1lCwraxDnjLl68EIR18
--> ssh-ed25519 OkGqLg 2jyx2iccmCeaXxs7pajP1WkRswZRwxrwVhNUKs1HzxE
-LjScnNDoWArkBXKWtSlJKnIlbnv0892nwn5aRyrF+sA
--> 8Y8-grease \ObI# /"xHCp uyu Gn&q
-mLNOU8cvH8SB5PCkgKkBmxTb/cgwiQEBUbPI6GmMxvXy/8EMg5K1h3kpKSawW849
-jtLtHeLrM8FLeNtwZyIWpG4
---- wnNSrutHnL4Trg5hNkuIHPguKl3JYjfEiJVCH4ScnVo
-:-$mY:yOLVLGdQgMbJÄ:O!6O5ɪOZ8*sA
\ No newline at end of file
+-> ssh-ed25519 dcsaLw X7cI9stdU1F8M8Mhk/5a4UwU2Ze6rBXuwRDxUTKCTHw
+CnksXNl+VEs2CYiucBeIgfpzpA05VshlECkbmTUZSpI
+-> ssh-ed25519 zcCuhA 7KOsie4KRM0pPKZk8MeDISuX4tT9MAw/5mehSQcNOE8
+UfbpAlKJVhZOH5j4YIw5CVDen7UebTO/S55sLT9tVyc
+-> ssh-ed25519 CpJBgQ EiDs9pCdSnPb4T4HvgF+gdyJ9f5orhtn1OVUp45e3jM
+SlMWEzpi/mMlhfBPzVBn6jZknvjWCbRQMLoJEklJV2w
+-> ssh-ed25519 aXKGcg kiuat73hEcxKvRZ9Gk115LjB3WVgd0h5KrjMOyTRLzw
+CwEmQX6vmi6DnJp/TeYFOSdsfrprHylXAzhnAaQ3aKw
+-> ssh-ed25519 OkGqLg R+moPPGckVPXrAnwQXFPqsizUwK+8UlL2VAA1965d1Y
+J0sxPR2PDqK3k39dSLOzFQkUUZ5cfYqww6NHQ7E4ql4
+-> lb6ND/-grease !D$d P~ Tj.
+HjRsXF0B07o957mq0zRgyHlckismT8UI8KcyFN55ff9FlWpci3+LEcPCb08wtraP
+DSRvOi4
+--- AomJrDQJ4VQghgD6b7ItcPNyiu+cDmNQM31FOqYBbEk
+
0:๹X0b^(:Vr%GTh>~q*	ת;}$
\ No newline at end of file
diff --git a/ops/secrets/buildkite-ssh-private-key.age b/ops/secrets/buildkite-ssh-private-key.age
index 485c90a9b7df..c9aa988277bf 100644
--- a/ops/secrets/buildkite-ssh-private-key.age
+++ b/ops/secrets/buildkite-ssh-private-key.age
Binary files differdiff --git a/ops/secrets/clbot-ssh.age b/ops/secrets/clbot-ssh.age
index a5019e7b87c3..c24f8f45d3da 100644
--- a/ops/secrets/clbot-ssh.age
+++ b/ops/secrets/clbot-ssh.age
Binary files differdiff --git a/ops/secrets/clbot.age b/ops/secrets/clbot.age
index d5d5ae2f08c3..2cec1f7f36c7 100644
--- a/ops/secrets/clbot.age
+++ b/ops/secrets/clbot.age
@@ -1,15 +1,15 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw aKWeIQEoQpPT9lPUsV7tK/ySf/0WmFWw7xr7ic4RDFM
-OLRVTC6qVuhNhkYbGQwrxq4sQnqmuQEclKeQ9VPJrOw
--> ssh-ed25519 zcCuhA j3JAw3UyZHR/x3O7pOTNkytbk5bTGnfBtsM030NolQk
-nt+9a3tJkO7j2nGI9C6S5YlYWYOCMqNOETU77PI4b10
--> ssh-ed25519 CpJBgQ ScLyIj1cdn0wAwgaOSVGsusx/y3PD5/rDy7+OvjGIiU
-5tYuoEfVn0i1RtZ5XP+1HgyTSWkkRN4m36u6Fj3PkC4
--> ssh-ed25519 aXKGcg 9p2LQFtV1X7jzG7n//GRUGmHGAsbGSCz6Q6SyBOZWwY
-wdOPCOHYkplGEoUOOTs99Kgde15xuJq8uzkZxudUo24
--> ssh-ed25519 OkGqLg oLEc1KdRriCWobe5DF9OKVwDqQaW9RyjWDft1h5M4x8
-i/UEbhITzk3IOYme/xKuTfdbNMFNhLgRHbiiCAgKFBI
--> %-grease 0 \^g*
-8aTar8xKZk24swVi7NVE0UN19BrexqAGcMWOeovRmQ
---- N/kNOLE5d+yk7fAPRZmj8E1qMggLha56uKb9oj0/uHQ
-- >I1f9NF	wKlx055OZz~ys!gQtՇl1Wf9\sΰp.n
\ No newline at end of file
+-> ssh-ed25519 dcsaLw ZkAwxhi/ckHaVTnF7bmzOXhQG3HHqw1CpMe6nQL0rHc
+9qnf0AY/inCEvk1VBd4RC3M0kATM/JuIyWxqisjersY
+-> ssh-ed25519 zcCuhA o3PRUMcah5zjj39LtDWpgmBPFtHyx1N9WQz++lFrFEI
+7K1kZHKfmlV5G/xVbgeOuLAO2iXKqcEyRYm+YfTvURs
+-> ssh-ed25519 CpJBgQ pFnL2XmxzppshipadVltN/zSgiRiMh6emu6O8EZTpxI
+K/RPjooKVSwqxc2aAUBtdTnkKoZvXDi+2NPB2NPXT9E
+-> ssh-ed25519 aXKGcg sTN4w5iMnwxmp/E7OKu5I3pUc695OXBYmfOY8/hs1AM
+DguaArDGVn7scD0NrDntgePjN1LFlfrPKfjEd1T9iOI
+-> ssh-ed25519 OkGqLg xuRTDdql+UBNW2go+XxkC/FJZa+N/e6Kj/Fjm7MzG3E
+KC39o7+WV+d/psN4mYSxeUSHsSCxPWTJgYjY1f1Dd3w
+-> J:e-grease
+CISPWfdtr4GKDU+lhCFk6B/EVyOmYwDxhChu
+--- nwu3QYk6rfvIJWJrTB8RSBsWjS1uok8rSxc9FCzoA9k
+WSMr
g#MSB}A"֞w}-Z1ooGo8Ҩw
\ No newline at end of file
diff --git a/ops/secrets/depot-inbox-imap.age b/ops/secrets/depot-inbox-imap.age
index 7b5239eb752c..9bce1845cb88 100644
--- a/ops/secrets/depot-inbox-imap.age
+++ b/ops/secrets/depot-inbox-imap.age
@@ -1,16 +1,15 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw 4Zyi7xrvUpD1o29jk2jZFyevOufNUZxXFZLGOYGl/no
-OqkxwnJmm+uxcB68kbRZGXdTF0eF00yRa+VHPo9bqfI
--> ssh-ed25519 zcCuhA T8mKAbPqW0DwgfgGV3vHBsh3EVdJ9u/Dy4rc1ZNlaiw
-PCrpy8B5FU4ocJ4Dc40+COr1cPdbzftM92uUMvZbT3c
--> ssh-ed25519 CpJBgQ g9AprbNRisLJjRFhqUb4pWc+vu+RvBhOukw+h0uYcmI
-VXOqgunhLalK1N4EgzCA8AITd3tNgY0ikCpyyeY9q6c
--> ssh-ed25519 aXKGcg tMVEWzuMllIlwJIdvYRWcIQZpLzOwcrysFHX+l3CSzE
-e/kSXrkq9zW3v6JqCRbfzgzzBbOrENe0l/MpzG5jTzg
--> ssh-ed25519 BXptmQ C9uXVk38/rIvUu5tvSAHp0HPjUIk0nrc0VvvAz5QhQs
-4gGC82Cep++wIPjWjSzvM8hQ4rirhQ4FhdsTq/Bvxvo
--> r?Q-grease $[L & |t^ftvw
-FJoB00YC6lQjdZq2V7+Woct0GjbOG+G2Nnb9oKEdC/uO9GtQWDe9mzd+j0mDZhOf
-QeW50xsAhKyOvGvd
---- uenuGhj/wtmitjJ1VcZBzu7zaXgAkP8Rmc8wrV5KdgA
-j_1o42g*$S_{N|rrrqHXS[r
\ No newline at end of file
+-> ssh-ed25519 dcsaLw cpeIOVtFcfaHZpIAp495fkQLJoT++h1v6p0crBeuzFM
++zomKCg7UVNl/FlfcZflVPbo48C45uGoGoR1tbetEdk
+-> ssh-ed25519 zcCuhA loSmQUCnO0EBaGg+wFYYkXOdLBQ6Z+pPl4Y3oGx6xzw
++RdXNYYtIDDXGr1Z0Mh28psvF9gzg12M3EJTUqmdFtU
+-> ssh-ed25519 CpJBgQ 0W0LWu8WW6pQzUhK21CeNDUtW0srwR5gNCRjwTy94B4
+A02F+AyP+DajnVTJakx+0jynYRDix9I/9uZUDPjXpis
+-> ssh-ed25519 aXKGcg SVBo2urAYGSYrlj3ieoi9nkrffcZ9ZroCn86pZkn4nI
+xQRrLNeNcI9cpQY+X2xfLDoBqLNQixGjaYtMDWtHio4
+-> ssh-ed25519 BXptmQ UKNJPPjIiqPQndZ6/yASSg+5PQIn2N9nUy2hQMREq1Y
+X9zM/ji9R3jLOEDGLpIVESjU13VU0e3cTAR1xEMhY5I
+-> B-grease Y
+vUOYknqY0okoUOKZD/8MpnpwkOU31sszuUZfeSVsuVyUMPEbFjWQT74
+--- ymKMaoUQXFPRc9U0ZvULBEC0Az0ew2oEyHwH/kR9ETI
+Eu	xe_)zPhsGBLQ
\ No newline at end of file
diff --git a/ops/secrets/depot-replica-key.age b/ops/secrets/depot-replica-key.age
index 38c1cb5a23a6..5e8ce94d5d61 100644
--- a/ops/secrets/depot-replica-key.age
+++ b/ops/secrets/depot-replica-key.age
Binary files differdiff --git a/ops/secrets/gerrit-queue.age b/ops/secrets/gerrit-queue.age
index eb9828847cbe..2e04be952d55 100644
--- a/ops/secrets/gerrit-queue.age
+++ b/ops/secrets/gerrit-queue.age
Binary files differdiff --git a/ops/secrets/gerrit-secrets.age b/ops/secrets/gerrit-secrets.age
index 9869b0d46ab7..9ad123d578d4 100644
--- a/ops/secrets/gerrit-secrets.age
+++ b/ops/secrets/gerrit-secrets.age
Binary files differdiff --git a/ops/secrets/grafana.age b/ops/secrets/grafana.age
index d6022b4ea541..eef349d64c09 100644
--- a/ops/secrets/grafana.age
+++ b/ops/secrets/grafana.age
@@ -1,17 +1,16 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw FAneL6Ra+ipVGA37rsEOIbObsDK5L93n1tk6vsDiq08
-HcEABCYv388oK0Fk3zcCXdnpi+arLHvYWjqS+vMwlWg
--> ssh-ed25519 zcCuhA n0FaAavgxFkJ1Lbd7bdDihV3m0aQ6IrD30G4N0NsNXU
-YumH3OYrbM/r/vgTFzJ8vEEWd7I/2yYdk6uBF4FLzG0
--> ssh-ed25519 CpJBgQ +80Q06PTyeX+lnPZf1o5v4jBDoSfuIudOD49c72i5gc
-gNXrdBhVicCa0j7uGmvFrbZFMgN+4NQ5wxyojQUI8JE
--> ssh-ed25519 aXKGcg cB4hgrcG47MEbgdvRQdJLBgQtGpyAw7rZTHQnE8mF2U
-vF46NzfPXjodk081WEd9D8LHMwB33Emswx65k2xiiQw
--> ssh-ed25519 OkGqLg H4abrPcW2U+0h9ChEANdCoaYgIXW/2GMOfaPXc142lk
-OYQyK4tSDsyRIbqLhXxWc6ZgnS4/9YS8FD/M3N8ctG8
--> 2UpS,n-grease 2@ A F$+@#Lk\ C4|Pa
-WKOTNBDihEkbp8U9elitxCVbpwa+RUXIUkWDKDdcLalK7no6DtfJVMyPAyPPymWg
-QOXPnkx1mw16wzj6elS86QU
---- vEbbqmuObg1gVHyfCb+6CN3bkeNyyWam3r7uG5KiHec
-m26NR69.l@(_ώYUMD'Nq%y%(2yJ% Co	)m
-
\ No newline at end of file
+-> ssh-ed25519 dcsaLw 0h55HIHm0kf6LqtI99LFUWBCoERBmpoF+anfnxjhDBU
+0bHlgfRABn51BoMwAIjUlaVnCr3ZDXkQPmFOiIV3TvI
+-> ssh-ed25519 zcCuhA 0vFMP1qFEiN4MUt+1qQCqtEovmO2d6QHj+KjHBrvqB4
+CUM2MDNPEKpksyCQmfDg/k/CKz7/ckgafw4aj0FLcmE
+-> ssh-ed25519 CpJBgQ Y971kTqyElTHpOw4D7mUfkIQFWELOBeuGPUE6bqSrXQ
+zt3ju2cqDfQJg9BsSsWcOGfPu5Q4XuIz0k2gasaRCPE
+-> ssh-ed25519 aXKGcg eNxh3cCMbxG/u4luhlE2WQVzFMlZIcDKDx4dcpK43hY
+HGJZYkWbYA0I7HtArCz9ErXwAAfOBHe20JH1J5Bx904
+-> ssh-ed25519 OkGqLg a1+l3dkThz8LLp7C1D9l7CzdB8Q4hxjNzaY7B6HMSnQ
+du3nw0b61TGdF91Mq7C/PpjDlnIIph1dVEIivcDpM7M
+-> \gwpw]-grease p#:x#sA ^S5*A/ ZpY
+1rTU2Rc5MnpJj8zwOK4yR9HvDPOiKjCKHOURq6ak4SUmEgqqyqoujzRaL4I0cKf0
+zMFTkoKnLXjjLiHyvJWqCGwCRq9veUsTiJ6jqs+y6L+YaT71qDzDXi3YfX2p
+--- hraNRaUxkHCnhk6AC/3jyxaAj1gyyIi0Q7cqoupcRrA
+:'!37 s+0@ׯd?!%lش͎;2B!/g/:wuՉ[~pF
\ No newline at end of file
diff --git a/ops/secrets/irccat.age b/ops/secrets/irccat.age
index b70abf636cad..2002b15c4957 100644
--- a/ops/secrets/irccat.age
+++ b/ops/secrets/irccat.age
Binary files differdiff --git a/ops/secrets/journaldriver.age b/ops/secrets/journaldriver.age
index 823b5278809a..c58773f36b21 100644
--- a/ops/secrets/journaldriver.age
+++ b/ops/secrets/journaldriver.age
Binary files differdiff --git a/ops/secrets/keycloak-db.age b/ops/secrets/keycloak-db.age
index 185f79da8b75..54194df18383 100644
--- a/ops/secrets/keycloak-db.age
+++ b/ops/secrets/keycloak-db.age
@@ -1,15 +1,15 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw rG0ThGyx3bkL/WOz1K1iP3CmrKORLjsUrLNJbtb1WB0
-xbkyt7EUb1BhBKUYt3hh93kEU1avcqlCLKfHc3x+BEU
--> ssh-ed25519 zcCuhA mwSN0urAXmA4vPCWIkzvCuDoE/LcA3eWpXr24Qab/lY
-Esa4Rfn55KYpIdYxsxGhBpPs40o28PJHbn8AEDn1n78
--> ssh-ed25519 CpJBgQ ODm3P+PymrXBxEejSDi2YUTEadBVzJiIt6vYHpzH1C4
-nC9FY8yilVG65HXmRTtpvjKj2awE9SI1qp8duskNP7M
--> ssh-ed25519 aXKGcg cdO7r0WCOktOmldIqvjVogyCximfA9sWd2Vq+bBgF2U
-1INC04f5PDwQgSQVeDpJomL5iZmyQfTwzHVu7BG+UUw
--> ssh-ed25519 OkGqLg D6x2fkkNeoZToQrOhNVh69Y3kWN5NqZzXkUc2556nBY
-ZC4asUqTT6ZnQdnYV9Xn0yqTgLFt14Vo+3RncxWingU
--> R^R|CZso-grease xq76HV<!
-MQSwHZCAIj24PlpplrTWjrZPAe5I31NC3xnWU80Q7Gk7FHUavAw
---- NG3cBfD3zeP6McHAXxhPuWZVrC9au95/+r6fMi01Gjs
-`$|mR_!z[|伭2s"h0ž*0(-&
\ No newline at end of file
+-> ssh-ed25519 dcsaLw tWBrwZf6FNYAHRjoVV9/X6gJCXPqxZSoA01dvIrIOzg
+6W2A3smrrosM3sJgl5CT9vkCWqVKR3SaSxWS2nnwKJU
+-> ssh-ed25519 zcCuhA IS0OcHfEfb01xe+FJUe1poruK+uuP0MaJpeoGYyVAFY
+eEzcEYcW4KoKZZUEH/ha1nn9NudeK9HgPRgmrCWMjug
+-> ssh-ed25519 CpJBgQ 4mjCHMHfnGu2bhANPBNmcrZQrKBcPgZU+ll8opmvGCk
+0+Vd6pRPovUcKa9i37JVU/DUeYAmJ9D88MR4flA8gY8
+-> ssh-ed25519 aXKGcg WGCgCoViKLqndC35OTaExqZlPBDRwXRBJFuS7fw8n3Q
+kUHunOUgIsxXmOzMCwUFF/0dYiae8YZGmgZaz8gXPJo
+-> ssh-ed25519 OkGqLg LLIDJkImcqMjwRitnGevcav5YjDwYsQ//elx7fgbCQ4
+EnYTppSr/GKug9T+bFLGxrxUnNiXD5ODhB75OcH/h24
+-> j@-grease @:arA
+8EFNz7i8N3gbZEMaQw
+--- RkHJIg9pif/R47lgqrZD/XgkTETxXWkwW9QnFFsmfOA
+o]~6+jn]l+K=ʽ	Zp9RzVg u2_
\ No newline at end of file
diff --git a/ops/secrets/nix-cache-priv.age b/ops/secrets/nix-cache-priv.age
index cc8513071ad9..0381fb12907f 100644
--- a/ops/secrets/nix-cache-priv.age
+++ b/ops/secrets/nix-cache-priv.age
Binary files differdiff --git a/ops/secrets/nix-cache-pub.age b/ops/secrets/nix-cache-pub.age
index f628f2bbe4fd..ae06f49d69d7 100644
--- a/ops/secrets/nix-cache-pub.age
+++ b/ops/secrets/nix-cache-pub.age
@@ -1,16 +1,16 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw j+RSQPvmBUL+/tJpoZqbMyh//yPYelDkS8rGMBDeYBg
-w9XLo36I+Fh8yCgL9aL1V2dHA5PFIhA/mi+inpA0vO0
--> ssh-ed25519 zcCuhA KTfCgCjc38/NRthB4ttrQV7aXbBgvs0Bgxitspo1TTo
-Zj7ZcjNxdiXgasq0pACRL6E3PvRsjsYsZeHFbX1mNYY
--> ssh-ed25519 CpJBgQ 4nH14KX8d5AYlQOYpAq77Oz6QLLcqh+We7WT0yXx3EA
-YCIc6wFk++uaankNET+SATIRMPXh1C2NemJssGUexXA
--> ssh-ed25519 aXKGcg x2izNmR+I9+2sRoHye4YUXU/6EZA8ZicIKUbjARVR28
-AV28t/cAwP6Js4lfYedJ88dCyAuKLq7RJU9SlhBx1FA
--> ssh-ed25519 OkGqLg PpKqeVlQ015Qv2zvvrR8kTj+7kDHirLz4Zk8f32NoTA
-huaUh3Q3uJmsi9yWyuJgnEhgmsVjspfpR+IN6uT8FgA
--> R2aR1C?^-grease
-7rumeWTufR7m6GRBOwKKVfzmMG8QRHzmt103vQfgmylhzGa2r6z2L3qSfFTqCW7T
-gMdbpgVvvTO+5aROt+iieBz9KFkHD3l/NXAhyZf8ydWRQlmDXcomY7QmSC3jLAE
---- RX4Cux3g3rn4jdCZMpP8XenZ45uol6W4+wBk8jofI0E
-=[ބ$֘Klmdhe&*ERtΟD:;-=;W$0
\ No newline at end of file
+-> ssh-ed25519 dcsaLw +jfxfM1YDu5CoYtFeRWtpkUQhmFWn/kNBYsBnie7BVg
+XxL9l87hXD0zCUEwbSR9OHSYgpOw89Km5iyxPPnVDGQ
+-> ssh-ed25519 zcCuhA VAoDkN2gwErUFE/59V4IF9PbSBSleOjt2gosvYnHxWg
+Pf6eh8EfAdATjZIkQfhhqOXuJXIdwIpybITcn+rcutI
+-> ssh-ed25519 CpJBgQ C6zIv78gu+wBeAjhmXANegSNqGHnugemXBPQcTimgxg
+80109g83Hk+smWuZkTIZJ6VFQqJ+LU1boWKQIH1AHjc
+-> ssh-ed25519 aXKGcg lPb+kGr0vuJkQO6VutAm4Yh1CVi/XfqNdGbAh/B7ZRk
+h4xb++7I9iv8208oqY0xLruA1r62mepISFcusczdbgs
+-> ssh-ed25519 OkGqLg aOHt9OR8JChtYpclkgn9wCFnlayFje7WsMGQb8AqChU
+3VRTDMUwFtDcoxGU/wiBzTvS0SB/xOpBG6s+ENvAXVE
+-> Kow$7|\-grease
+8OGnQnY7gm4vMJRXjnBogA0HRU7hqIxs2sErFc7sV1CUNkZlFjdK8tZomlNwshjc
+p18HgtjJnaGhSqg1LyP7cJAo/XnSwDYCeNna/6vdlKBR3JeuOGTmx1NIG/cGSg
+--- w+jJplb/J3av+UcltcFf4qSqHoQ8Ol8lH/fFB3051Gw
+qIe:1*`j8snHcy7õ(.xD_}%)P,D6SHU9딬08\'
\ No newline at end of file
diff --git a/ops/secrets/oauth2_proxy.age b/ops/secrets/oauth2_proxy.age
index 816944684a37..f2ccf7e96d73 100644
--- a/ops/secrets/oauth2_proxy.age
+++ b/ops/secrets/oauth2_proxy.age
Binary files differdiff --git a/ops/secrets/owothia.age b/ops/secrets/owothia.age
index c3ad07d2324c..177ee61383c9 100644
--- a/ops/secrets/owothia.age
+++ b/ops/secrets/owothia.age
Binary files differdiff --git a/ops/secrets/panettone.age b/ops/secrets/panettone.age
index 542c866d61c6..0be42dc0a779 100644
--- a/ops/secrets/panettone.age
+++ b/ops/secrets/panettone.age
@@ -1,17 +1,15 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw 0vXqVyiNwKAvIjBi1PPPWYzapFFuwFAGQqohfdaaThc
-cp+oevy9hbMvviVNTxKpws1Fsyirxr/nKZltlA08cWI
--> ssh-ed25519 zcCuhA bFhpOsXo7H8GF3xLFwLs84aJegWj50+pEQDbyYYpwE0
-Y5iRW6/dhBNUHgNmObUEJu991Ms0RU1Y7xkeoz16A0U
--> ssh-ed25519 CpJBgQ 5y0eXpmerwxRtySanRSBQeHCkMt96BOLVgR8S2lDSH4
-+Z+3b9d8B5HZRVOL76SCNPIh9nhXKPSWq4lj0X2k2eg
--> ssh-ed25519 aXKGcg HK5KeRoc+fhbYQ9RZTnum5x2y+vvyEQNKRpnNOISFn0
-TxZplwFO2e1YgY/V9tkLSVGxh9407xsxsT09N3jfcv4
--> ssh-ed25519 OkGqLg otifGzPJ9Ykwdx9AkwlFW9AHAQL5OXnDexp8N4lJ6ys
-dFVgPNi8p3wQYbVbokxGqiNKUd3POXBs49LO3FAR6Js
--> e"s'-grease :{S#]YZ MyRj r['U^ 0
-+qc7
---- Gnh5iyD6drHbPt2bE9JCGlXcPAPDPhkJl8A9+5SHNz4
-!u
-9wIV~Ep| *aGc3ZƩSQҾ\)f[)7gޘסPYEE5W$igLLCF=N
t
-b7ŏyFx;d9н+<r(U^P1W/%w#cWKk|)MrrYzL2/!]:Drya̳G
\ No newline at end of file
+-> ssh-ed25519 dcsaLw zzUe0JqhICtd/kgZnXFpwaQ1Ma6nqy/hMWaOJpRHmDs
+4cR+OnWShG6MpB/u0yfsSxplEch7x7DbygfBiJGxOOs
+-> ssh-ed25519 zcCuhA 0RZEYC9IuazO9fROalwoOCIgc0j+rNBP3gw7SKG0yEw
+mPRhN0hvccEr1A9ihWAFMH4/24vpBKpxBVq4BKBMmYM
+-> ssh-ed25519 CpJBgQ VrmfTtTVxuQmpUxMxtXtCnr8pFyqwtdyLHdbzYrlKlM
+kHgEdPmoIOLnGuMF5F5Ol1yZWcactSE4OZI0BSmDN+g
+-> ssh-ed25519 aXKGcg On4jwgsH504ZjYRwfw5oAfIDk3wU0+xgd43ryAn9H0I
+fayzht1ZPPiFCjuYTdwVtJu2nOUg4wtp5IipOR4oJm8
+-> ssh-ed25519 OkGqLg mubp0xI0fvsKOAUaNaftFkHJ+bxgFHbgjn+A7sR8XVs
+X68Zr8HvC4/XPC0AFIA5f1SKu7NSR/23oeX8cW1qfis
+-> ?`-grease
+hOy2Rwvk6+vXpHWWA49Wp10wKbw9TfsLXw
+--- 9MLGx6BVm40C0CSV3bq6dnXrpy3QunBlh2/uO5OisUU
+dzG<YAVs/-%g.e@,ZFW收&<Oq@>w̛Q>-gǓ'`XҟP8x<RNv9#'/)gm2v<,7邢qvQAO-ژ+gc#޵*e -) ;
\ No newline at end of file
diff --git a/ops/secrets/secrets.nix b/ops/secrets/secrets.nix
index a278b24d4bec..3f7740a2e548 100644
--- a/ops/secrets/secrets.nix
+++ b/ops/secrets/secrets.nix
@@ -2,6 +2,7 @@ let
   flokli = [
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPTVTXOutUZZjXLB0lUSgeKcSY/8mxKkC0ingGK1whD2 flokli"
   ];
+
   tazjin = [
     # tverskoy
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM1fGWz/gsq+ZeZXjvUrV+pBlanw1c3zJ9kLTax9FWQy"
@@ -21,6 +22,7 @@ let
   sanduny = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOag0XhylaTVhmT6HB8EN2Fv5Ymrc4ZfypOXONUkykTX";
   whitby = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILNh/w4BSKov0jdz3gKBc98tpoLta5bb87fQXWBhAl2I";
 
+  terraform.publicKeys = tazjin ++ grfn ++ sterni ++ flokli;
   whitbyDefault.publicKeys = tazjin ++ grfn ++ sterni ++ [ whitby ];
   allDefault.publicKeys = tazjin ++ grfn ++ sterni ++ [ sanduny whitby ];
   sandunyDefault.publicKeys = tazjin ++ grfn ++ sterni ++ [ sanduny ];
@@ -46,8 +48,8 @@ in
   "owothia.age" = whitbyDefault;
   "panettone.age" = whitbyDefault;
   "smtprelay.age" = whitbyDefault;
-  "tf-buildkite.age" = whitbyDefault;
-  "tf-glesys.age" = whitbyDefault;
-  "tf-keycloak.age" = whitbyDefault;
+  "tf-buildkite.age" = terraform;
+  "tf-glesys.age" = terraform;
+  "tf-keycloak.age" = terraform;
   "tvl-alerts-bot-telegram-token.age" = whitbyDefault;
 }
diff --git a/ops/secrets/smtprelay.age b/ops/secrets/smtprelay.age
index 3904107261d9..62fbaffadf6c 100644
--- a/ops/secrets/smtprelay.age
+++ b/ops/secrets/smtprelay.age
@@ -1,16 +1,16 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw mqDmOqzDl7BY8xj7TuCHcIGrkiqURHK4Y4NkmUesyQE
-sfNvq6kuQUWuza3B6feUQtcWYhYh/aiN89fTOHdhHSY
--> ssh-ed25519 zcCuhA rBlPiVmj7dSYHljc4/fhL7a9GSeCp/8FqG1R2f1kPgw
-o6Za8zm3n2LBnj9jQAU7Xtvt5ULIUesdiTi11DeRMY8
--> ssh-ed25519 CpJBgQ vM3qI0XMQJY/ExxE3a0mmHhc5hY9rPDBzdJ4v9oZBlY
-lLHtL9j8ltx86eWwlPkyblcWjRd2iMjimwMXZptsRAc
--> ssh-ed25519 aXKGcg +6heNooQufYnntQ1PJHlW/8aG4vijzY/CfXHUGPKMQE
-T95bxZSRC9Cdx9ZTaTnHWdeq0wKOkRL9mQxNo8j9SfA
--> ssh-ed25519 OkGqLg HvpZmHz0DZIqWHiXvUsJ/OILlRhptl4WMDDiVF6dxko
-FoTSc84FRFnBh0rOYFX3M7t9p/hvn4DZMHZfU9jy0zo
--> $<0F{v-grease
-blva6tBLrd967p8hOMGy0JT6Y19zWNdgowASEEBpoFzsmNlyKdbaYyMbxKTuqmCy
-8Wy5TpBj99pcUsEB
---- DTMNC/wQr8xtJKIPPKjx90PmAZ15eimydKbYGnEa7Jc
-֐Զ"RA!]*	)
2)7ꗞ3AjӤʏL5EN"1:4tp.܋jpqG2(\mqߑF@1aŌ%
\ No newline at end of file
+-> ssh-ed25519 dcsaLw CW2Lgm0tSWUDwKSNSX/aLkVzQ/QeEeQgU3NITpz2D0M
+F7dA+zWdCz21s443bj9zCz6lBsRlFIxiG+l8CdbuPFk
+-> ssh-ed25519 zcCuhA l8rsBoYDwhUB5stbeGXYTQ4Fz745ywXFCOQZn2cMBW0
+TycVcUZjR2TDv5DPC54+RwoU6Fj4QpRUJj1j0HM/JCE
+-> ssh-ed25519 CpJBgQ CbwZO5LmSxd0HRYkf+lV+ymFcXSn/49GAPHG4l1I7gw
+xSmab5+BnAZF/B0n32xX1qZPdHgfoEMGIuZqlpnISjc
+-> ssh-ed25519 aXKGcg Tr+odf9p1RBrQK1guR6ToeN4wG1KLA3jwiPIkgyEjws
+TaeCnjiRp8VZoMS5qs+OfVbBc6zudayD693h/eGvVOo
+-> ssh-ed25519 OkGqLg Dmnsqz6PKzMd6w4t+l6+EWuia+stPwSEtu00KVuAojo
+rZ/i1WJhrCM/ZQTAroRRSjzUVJw2UJlPUe1uHYqSscw
+-> w!^Z-grease i86O2 i0.Rch
+/zsRadAGYzAY6F/J5m6lMjmojkN7NbY3TbfQbA
+--- /rQgwuY9SVGLKeUzY5P6c+sGQ1I1aw5cQxmO46QKDSQ
+(`U ,c|ґP畠9@&	gMߒ
+CH3ik3#|gMAgAnZYt2K2ޘY
\ No newline at end of file
diff --git a/ops/secrets/tf-buildkite.age b/ops/secrets/tf-buildkite.age
index 5ce558136d42..0cf6066fa604 100644
--- a/ops/secrets/tf-buildkite.age
+++ b/ops/secrets/tf-buildkite.age
Binary files differdiff --git a/ops/secrets/tf-glesys.age b/ops/secrets/tf-glesys.age
index caeac0b1ee1e..4e50454b6214 100644
--- a/ops/secrets/tf-glesys.age
+++ b/ops/secrets/tf-glesys.age
Binary files differdiff --git a/ops/secrets/tf-keycloak.age b/ops/secrets/tf-keycloak.age
index c916dcd2a356..237b9377bd79 100644
--- a/ops/secrets/tf-keycloak.age
+++ b/ops/secrets/tf-keycloak.age
Binary files differdiff --git a/ops/secrets/tvl-alerts-bot-telegram-token.age b/ops/secrets/tvl-alerts-bot-telegram-token.age
index d9562ce924ab..e897fedc03f5 100644
--- a/ops/secrets/tvl-alerts-bot-telegram-token.age
+++ b/ops/secrets/tvl-alerts-bot-telegram-token.age
@@ -1,16 +1,15 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw 14nPZssvAKQSzPdL+1iyz0BVA1DOdFDafdCyRfcmSWo
-+ENcKRKyUN3G9+kd/Y9IpQbO3rIZdYiznqGO1cfVNZE
--> ssh-ed25519 zcCuhA i/ag/HD84XrTpYigStOfwnWBLjOSypCnVuIYjtdVc2o
-T+dN0nl3H6J6OaMyLNHLgy99H8YJtSjgintxogJkWjo
--> ssh-ed25519 CpJBgQ bbyerpmjpTkMmSaLnV5OuMQzqqtGao4eqE4kiFzm+Dw
-0Hskm4/Cks4Eu/Jr4Eh6302jWo64rdInvvJH6XJFyBk
--> ssh-ed25519 aXKGcg sqdfN/2YLFmdhEWgn5Z/OAsmXwMORX/dPrmD4O7MlCE
-h/ej9LjZHn04rkEbvIaGAcLT3dMs9RdL3vFA+Rgdp3g
--> ssh-ed25519 OkGqLg fK2cPxfOupCIfC1giMj2CFg/K/+4XX+fLpkqUmQHzDY
-uXTHT30ytEvliNAvmwlPyaySsYDVLarZgouV9Tfo6qo
--> Me?Ykt-grease 4S m!3LR ^/)u#tFR
-1A
---- UP4D68fCAMJC+1T1zbIiGCah3Ph+pJf7Z6wv2YJaOCQ
-js]U-Jγ6Y#^
-$$L1pwa:qwgq3Ԓb0zH%f!.0ΐ'֘!
\ No newline at end of file
+-> ssh-ed25519 dcsaLw JGXCnhez0LnlUV8eOitxizmxw/gV+1taBRhNvwvVcms
+qsRTOpifnoc0eorFjd4UlP7O3hkRR3KjDUcImASK0jY
+-> ssh-ed25519 zcCuhA KUcyaHcmuqCGtJBzvc2UK17gRrjzuzIxll+TS9Q4nWs
+CAJ19ClA9Tqj1fcYySq+K9gdZe6Uv0toZLnhlovr3tM
+-> ssh-ed25519 CpJBgQ OAE+u9JuC6KoefjCOTj4NkQElZRe6/EEIAGBN/XelnU
+M9MHlKxbEBJ+gACo2FiYqmm1cAoYW31+nP16qnVZ7Zw
+-> ssh-ed25519 aXKGcg Ll6v6v5HpUIEuOzjpVsPMmPQMnNkmyB4fz/YwNXfCHU
+MmFQy2WkKn5SM0bhe4NNe/lMnneKoOF+Ufq0t0QjNbw
+-> ssh-ed25519 OkGqLg PS6KLwat1z2BSQ9sIKDaryVU39EJR+iiAaKSP/KSPk0
+qUQP2f4MFk83zQ9edlSNC8jwpJvmp2xhOysd8rnYzW4
+-> >NI-grease @mOcHT z|%,s- mw^c *
+zu0M2pS6v3zehnLg
+--- jltBYy9brAtpkEIqPoGmIVe3s5XnWtpa9EmuXlAf91c
+tdX2-"#1n'\'{Dlw;Pִ@{B	!y+xWB:wtqph
\ No newline at end of file