chore(creds): encrypted secrets [agent NK-WP-0005]

2026-03-21 10:42:39 +00:00
parent f227dfbd3d
commit 33b9b93dba
7 changed files with 2 additions and 2 deletions
--- a/sso-mfa/bootstrap/creds-state.yaml
+++ b/sso-mfa/bootstrap/creds-state.yaml
@@ -7,8 +7,8 @@ schema_version: 2
 agent_mode: true               # NK-WP-0005: fully automated

 # Phase tracking
-age_key_present: false         # ~/.config/sops/age/keys.txt exists
-secrets_generated: false       # gen-secrets.sh ran successfully
+age_key_present: true
+secrets_generated: true
 ops_bundle_created: false      # age-encrypted bundle created
 ops_bundle_location: null      # path or storage hint

--- a/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age
+++ b/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age
--- a/sso-mfa/bootstrap/secrets.enc/breakglass/secrets.env.age
+++ b/sso-mfa/bootstrap/secrets.enc/breakglass/secrets.env.age
--- a/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age
+++ b/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age
--- a/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age
+++ b/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age
--- a/sso-mfa/bootstrap/secrets.enc/postgres/secrets.env.age
+++ b/sso-mfa/bootstrap/secrets.enc/postgres/secrets.env.age
--- a/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age
+++ b/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age