From 9bc049425af8c256059421a76ec63d3eb703a498 Mon Sep 17 00:00:00 2001
From: Vincent Ambo <mail@tazj.in>
Date: Sun, 3 Jul 2022 14:56:25 +0300
Subject: [PATCH] feat(ops/secrets): add private key for depot git replication

Change-Id: Iaf86d1fe635be8fbd9bc8a397999a2cffcc21606
Reviewed-on: https://cl.tvl.fyi/c/depot/+/5914
Tested-by: BuildkiteCI
Autosubmit: tazjin <tazjin@tvl.su>
Reviewed-by: sterni <sternenseemann@systemli.org>
---
 ops/secrets/depot-replica-key.age | Bin 0 -> 1162 bytes
 ops/secrets/secrets.nix           |   3 ++-
 2 files changed, 2 insertions(+), 1 deletion(-)
 create mode 100644 ops/secrets/depot-replica-key.age

diff --git a/ops/secrets/depot-replica-key.age b/ops/secrets/depot-replica-key.age
new file mode 100644
index 0000000000000000000000000000000000000000..38c1cb5a23a6014a2581ffef1de657288a7f0354
GIT binary patch
literal 1162
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSnNiI(GDOd0+t<3dH
ziK+@t^)B==P09+%j0(*NjWRJX3d#sEb27{`N^?t2bn^@hwBU+xHVzFeNG#SjD)!F^
zsmM-=D$Fo(^vH-Ptjr56wA3#sH226V40jDQD@M1iD%rU-!%;y$D$}{l-76)h(977{
zJR~L8xI8I6$Fnpd$=%PiG&v$U&@w|m+bO`eJd!J~(!b0i$ICh0C%d93)yOe5DJS3A
z%(cie-N)NG-_p-3#W>6_H7Ln1*%#e5=K?RM^gxAR<K(i;kP<i7qJq%k<dPhHS0^t^
ziyZCp&^+VdKrf>pPY<u~;D~}Mmvk;OU$3f4WB<g;678Vk@(gz~bFVP}@<4O*VyAp(
zryPUI$b!mTk1V&aL=4*!BfQ;{(-k7p$_<Ju!z?2#{UVKvliUk~qQV`Ey{ZDs@{$Z3
z!=ns5y+iaPs#4P`^SNB|Q<DrVU9_D;L&~(hTmy1)e6<Y|OAHN+owNPI)664FjmwSm
z{Tz*rlF|L<pY2}glde#d>1p9<;G2^knp$dX9-1HJSK^i)ZXB8JQtne~pzY_Fl;>TR
zTM}WM5z6ImSe|I<maQF?ZK-V<k(?HsT<l`xottc692Vi6WN1<voSGF;>XVq{1-8w$
zvM?^WyiPa0C^fM-Rl&G2JF&{VSRqJ3rOvEWQ^7Q&GM=kEJ)*QEw7@JlGtxufvb@00
zq$=FYugEu~Ahg8OsJt@6w5+7q-!!qTDz73`-yk<cKOo2_#Ve{PwU|p+S6895*e^H0
z+}F#iFvBCy*~7@&(mgmdDa_3zBP`D|vLYkj$+a}o$2BxEEt%^v=Zl_Ix7oBc>RQfn
zhCirT#i5XMC&>A7puB8Sdg<jAckc3Z^S#V)wbv^#@th++lR+#)VPcTDi1w~C6;oHs
zC#}3x6g>B2%^unOf){zJ?ZO)#oYwruJUfPa`$3N?tL7j14^N)nQ2z5>rT507m_}ib
z7&iU0;mdaW1xOv4{CwK)xW~88%0wS1P0;@yQC#)t%%1BC6)aMZD;Gt*-w<{6>rq4Y
zcDeTD=kzp`3UaRRcQp~5;O*7?C#ubBxBZ40NgK^y@bdR~9!*jYn^D%HC;4GU{?r4S
z(r1_N*&@Jv{AXaJcIT6i%`9xMJ>H$#5q3KIcz^Z^_DgLO{65@P4LEJB&>e9g&1uyU
zYxS$gEqzs;eLJ4MXDZO*YK^(@Kr#H<%*U1!^sXl!oWsEW;Os#QA?_^_GaF`nmh+LC
zX=$PUp=DxF!*Om+(KXThXGQ+Rgw<KL1PLwFGR&NoWayd8D(}8E;Pmzdm1l*!znxRO
z9kN>gvCDqJ?=FSQ9awB9CLDEs6L9AM2g|jDXYL&F&Og<+GirX^{HZyDb5_{T^%Bwn
oW%2UYK3%=p^rmcm^26viuKf2Vow1#)t9Lel-TtxM-ZjDD0Nk9p=l}o!

literal 0
HcmV?d00001

diff --git a/ops/secrets/secrets.nix b/ops/secrets/secrets.nix
index c1d76b948..e71ce0098 100644
--- a/ops/secrets/secrets.nix
+++ b/ops/secrets/secrets.nix
@@ -24,10 +24,11 @@ in
 {
   "besadii.age" = whitbyDefault;
   "buildkite-agent-token.age" = whitbyDefault;
-  "buildkite-ssh-private-key.age" = whitbyDefault;
   "buildkite-graphql-token.age" = whitbyDefault;
+  "buildkite-ssh-private-key.age" = whitbyDefault;
   "clbot-ssh.age" = whitbyDefault;
   "clbot.age" = whitbyDefault;
+  "depot-replica-key.age" = whitbyDefault;
   "gerrit-queue.age" = whitbyDefault;
   "gerrit-secrets.age" = whitbyDefault;
   "grafana.age" = whitbyDefault;