From d502d5f4e0d0ad1ca6cb7ca1bc02b4423dd20694 Mon Sep 17 00:00:00 2001
From: Filippo Berto <filippo.berto@cern.ch>
Date: Fri, 7 Nov 2025 16:26:46 +0100
Subject: [PATCH] Add garage rpc secret to sif and thor

---
 secrets/garage_rpc_secret.age | 39 +++++++++++++++++++----------------
 secrets/secrets.nix           |  2 +-
 2 files changed, 22 insertions(+), 19 deletions(-)

diff --git a/secrets/garage_rpc_secret.age b/secrets/garage_rpc_secret.age
index 99be474..3719905 100644
--- a/secrets/garage_rpc_secret.age
+++ b/secrets/garage_rpc_secret.age
@@ -1,20 +1,23 @@
 -----BEGIN AGE ENCRYPTED FILE-----
-YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDRiZWhGQSBBUC9V
-RjUrS1NNc05YUTYwVVFlVFJGeERaN09KV2UxVWhCeW5VN0RTR0ZvClVvMnRBQlJS
-MmUvak1wZDZRSUZJclZMaTJRT21PSUpqWnVLYnRQOWM1Qm8KLT4gc3NoLWVkMjU1
-MTkgZXZMbEl3IDh1TmZDdCs0eXl1MGJtK3lhTHIwOGVtSVE2TzVXbDBRWHYwZ3ZG
-YTVFUlUKSW1oYTV3T1liY3puaVFBOEFOZ1QxY0JBZ0pOWERndGRDa2FpU2EvNW5V
-QQotPiBzc2gtZWQyNTUxOSBqdjNlancgblNxcTI0V1llSWsvZndvL0s2V0l4UjJZ
-RHZzbE9KbmkvSGxheXdOZ3YwTQpvK0puTjZvdjZrelBiMkRYTDNhSjB5UDBKSVZq
-ekxnZ2c4ZVFLTi9iVW9nCi0+IHNzaC1lZDI1NTE5IHlpWW9YZyBqNEVTZGdHRS9F
-dFN6MHJUNFJuOTVBdEVNOFBwam5Tc2poaWpNaHBmRHcwCmdQeXgvSGdHMFYzb2hT
-V1Q0RFNTQ0xUelVjdm1GYXBoLytzYWJYYTZmNzgKLT4gc3NoLWVkMjU1MTkgSXZ5
-WXVnIE9COTRJRFpBVi9KeFAvQVhtSW13WXlpRGNqWHpQOXBycEtJN1VMVXNnRVkK
-dFRQdi95MDc1VnNhaEdaTGFneVp1Mm5vT0l3RkR6TG8zdUNmSFVocG1QYwotPiBs
-Qz9KUj8tZ3JlYXNlIG18LiN5P2AgNjdYbGwKdGR5aVNNN1NpbWRpVWJ2QlZGcFpY
-d1VBWEkwNWhzbzhsZXI3aGF4Z0dGOVJKNGVOZkxVUm14eTdjTDE0ak1PZwo5NHFm
-NVU3MnRhYTRVemU3WERxV1B2Z2J0QQotLS0gQThONC9tZnB1enNmSlVib1ZtNTkz
-em41NWI3cm9yaFhNKzdPTUZnWTY4NAq4JKv0GdW8VJ0HO7CBbT7gozTtabJt0uJn
-PffhH5fy6xjpqbi/EH0DLuVa3rdxTq5FwUVDVGi39qcZz0ktKIrt6ZOKrXWnt+Gf
-tpPGqwjDnwe5rskM8SurP7cdWBA1agkw
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDRiZWhGQSAyelI4
+WWVmd1lRMU9Pcmg4a3p4V2dIMkNQS1hUTW9BbVZoNU9YYWhpT0R3CkkxQzNBWEw3
+djRkdytTVU80TG5HRjByS1EvRmVyTnRNcTNad3NPTTE0ejAKLT4gc3NoLWVkMjU1
+MTkgZXZMbEl3IHN3V3BYN2pMSSs0eTZpemRIU0Z1REJhNCtvR2pHNnRDdGpjYWpq
+dGpyU1EKSk5sVlFaT0tiQlFoeUh3RTRwWHNETXJFNCtKc00rOHcyUWlxd2NtUERh
+MAotPiBzc2gtZWQyNTUxOSBqdjNlancgY1E3ZVFJUVJIcldUT1AwMEhtQUZCd09X
+N0ZKZzVJWmoxUmExWllTMlpDcwprMjErVmNnVnB5eGNxTjdkZ2prKzNYTjkwaWx3
+T1c0UHVtbGhpMk5TNjBFCi0+IHNzaC1lZDI1NTE5IHlpWW9YZyBUR1g1ZDN5RUMx
+NFl1OHNLV0xlTTl6bTVYSVFmbW5vdWVhN09FbFZ2a1I4Ckw3RjFxUVFOU1MyTG1p
+eWdwTjRSY1JoYXFDbk5PUWc0VkFOZk5PT3IyTWcKLT4gc3NoLWVkMjU1MTkgSXZ5
+WXVnIEhRZEJnZHdtUURpYnlINGI3R1RyOERWZFRRb21YSFRScGI0VGRnZ0JNa1UK
+em5Ha3l4aE5LNVBSUmt5bERybVVsYm1OQnVKZE8vNTdlMnV3MUhFZXRCQQotPiBz
+c2gtZWQyNTUxOSBmdkRVWWcgTGtIb0RVejBlQ3JJdzdyaUJ1aVBzOWQ4OStVSFU4
+Nmh2RDZBbFlhRHZUUQpBSVkya2JBTmVBa3NkVnFabnVxOVEzRTJhT3YyOUJ2Tzha
+SXpwSkVzdTZNCi0+IHNzaC1lZDI1NTE5IHY3Ty9GQSB4dldaY0dTU3BUbGFkMEVJ
+b0d3QTU1cEpGSkFTUmx4VXlGYzFBcld0N2pjCnFWR1E0bGN3RDB5bXBhWXdiZlA4
+cWtVVVpBVDg3R2tzM0t6Vm1UZTRDN2MKLT4gYlFgJURgLFstZ3JlYXNlIHI3IDxy
+Y1ogXlVMIiBYCmN1SFlUNWVnCi0tLSBOMWFIUGtuWC8xNGdwblk0RldJTkJaUUNi
+N2ZqQnJxTDhuam4xMVFlYVlvCpzaRtwCXEDnumGHzs8IhCc32derGw5jhPXh5ADu
+FvIQrssgmsNg5MgPV5QXy8hL3reQ19XOzYDQ05wcP3FMmb/A0P3TfvVTTw0BvgZO
+i7M6IfKocjk7X8aEbR7+wtLeFKw=
 -----END AGE ENCRYPTED FILE-----
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 3035931..ddeeae8 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -27,7 +27,7 @@ let
   ];
 in
 {
-  "garage_rpc_secret.age".publicKeys = devUsers ++ [ baldur heimdall odin ];
+  "garage_rpc_secret.age".publicKeys = devUsers ++ [ baldur heimdall odin sif thor ];
   # "oauth_proxy_client_credentials.age".publicKeys = devUsers ++ systems;
   "vaultwarden_env.age".publicKeys = devUsers ++ [ baldur ];
   "baldur_wg_priv.age".publicKeys = devUsers ++ systems;