.

.sops.yaml

@@ -1,7 +1,7 @@
 keys:
   # Replace with your age public key (from age-keygen)
-  # Example: age1qyqszq...
+  # Example: age1rz4eyzmmtmua6s9cny3pjjwv80n4fpvhkwc4jzdd8vpre8zc5vtqfjtuy0...
-  - &vps age1__REPLACE_WITH_YOUR_AGE_PUBLIC_KEY__
+  - &vps age1rz4eyzmmtmua6s9cny3pjjwv80n4fpvhkwc4jzdd8vpre8zc5vtqfjtuy0
 
 creation_rules:
   - path_regex: secrets/[^/]+\.yaml$

flake.lock

@@ -0,0 +1,48 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1751274312,
+        "narHash": "sha256-/bVBlRpECLVzjV19t5KMdMFWSwKLtb5RyXdjz3LJT+g=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "50ab793786d9de88ee30ec4e4c24fb4236fc2674",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-24.11",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs",
+        "sops-nix": "sops-nix"
+      }
+    },
+    "sops-nix": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1773698643,
+        "narHash": "sha256-VCiDjE8kNs8uCAK73Ezk1r3fFuc4JepvW07YFqaN968=",
+        "owner": "Mic92",
+        "repo": "sops-nix",
+        "rev": "8237de83e8200d16fe0c4467b02a1c608ff28044",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Mic92",
+        "repo": "sops-nix",
+        "type": "github"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}

secrets/secrets.yaml

@@ -0,0 +1,16 @@
+searxng_secret_key: ENC[AES256_GCM,data:aYsAiN0AdmNvCZlcPv8RgVAz7yE9KS36FfyH1RvbkaHKthLqHhL+nmcr3ThNbJVUxdqOWfAzQS8wq/k4usibYw==,iv:1JKxXfy2HqoCzgtBuLyYCDxH02OpWE9YZ8EgUQcAGCo=,tag:RfVPgAamh9vRlFpCJ65pEQ==,type:str]
+sops:
+    age:
+        - recipient: age1rz4eyzmmtmua6s9cny3pjjwv80n4fpvhkwc4jzdd8vpre8zc5vtqfjtuy0
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzQXpMcWIvazdHSnl6STRh
+            TUxRang3aTdSTlhTUS9yY09BT0ljSVREdVY4CjNyVXUwZVNUWTZRcmExUVZYZHZP
+            ZTZ6UlIrNHNvZ1Fhb3J4MHEyaWVJTzQKLS0tIEhkaElvVkxJcTRiNGZLeDVNY1BK
+            SnI3Z3p6U0x1YzVUTHZ0RVh0cHBDSGMKbDXwp9MM9cL/9DgWPV/btH6iYgaVXmvw
+            Gk4IsH7zEWbS1kxIEapzBpIINTSQKZ30aPqwuspVKdSa8lsfi1X1jA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-03-17T18:55:42Z"
+    mac: ENC[AES256_GCM,data:uUo3rGQFDK5/hQ+DT6ZGu+ciSMXIfQg+fqXsJhHNs9DeHc0AgjKTXKMX0GlH71Ldp7/f2lqqsDwDBfgL8K++ObS0Fp8au/gFw9Ky+Hsw5QvwTBVJ1io0PjoSVwxy2yRo3/pzduEEvgXXq1DwytTVO31uFbyLzQzacdDvJDWDP+s=,iv:yR3NH1e4fj83/URX1iZk2peIYfcI2HsM7CRN4f+3JYc=,tag:VlvhsuN7uqkNcogYhN7W9Q==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.12.1