sops: the combined cc-ci host ssh host key is a recipient (secrets submodule bumped) #35

Merged

autonomic-bot merged 1 commits from chore/sops-recipient-cc-ci-host into main

2026-09-07 21:31:35 +00:00

Author	SHA1	Message	Date
notplantsandClaude Fable 5.1	62a927c552	sops: the combined cc-ci host's ssh host key is a recipient (secrets submodule bumped) continuous-integration/drone/push Build is failing Details cc-ci-secrets now encrypts to the new host (195.201.88.249) via its own ssh-host-key-derived age identity, like the canonical cc-ci did, so the off-box master recovery key no longer has to live on that box — /var/lib/sops-nix/key.txt there holds the host-derived identity instead. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz	2026-09-07 21:30:49 +00:00

Author

SHA1

Message

Date

notplantsandClaude Fable 5.1

62a927c552

sops: the combined cc-ci host's ssh host key is a recipient (secrets submodule bumped)

continuous-integration/drone/push Build is failing

Details

cc-ci-secrets now encrypts to the new host (195.201.88.249) via its own
ssh-host-key-derived age identity, like the canonical cc-ci did, so the
off-box master recovery key no longer has to live on that box —
/var/lib/sops-nix/key.txt there holds the host-derived identity instead.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz

2026-09-07 21:30:49 +00:00