From b40784c30e268194b513f1d70ec37f0414719cc4 Mon Sep 17 00:00:00 2001
From: admin <gittea@mail.com>
Date: Mon, 30 Mar 2026 21:43:03 +0200
Subject: [PATCH] feat: add forgejo-auth secret as SOPS-encrypted

---
 .../flux-system/forgejo-auth.sops.yaml        | 29 +++++++++++++++++++
 .../homelab/flux-system/kustomization.yaml    |  1 +
 2 files changed, 30 insertions(+)
 create mode 100644 clusters/homelab/flux-system/forgejo-auth.sops.yaml

diff --git a/clusters/homelab/flux-system/forgejo-auth.sops.yaml b/clusters/homelab/flux-system/forgejo-auth.sops.yaml
new file mode 100644
index 0000000..e154d00
--- /dev/null
+++ b/clusters/homelab/flux-system/forgejo-auth.sops.yaml
@@ -0,0 +1,29 @@
+apiVersion: ENC[AES256_GCM,data:szQ=,iv:9dA292fI+pcgGcQaOtAoS5k/TLsp3KXemh0raN5rkl4=,tag:i24xABHKpbQC8kFGyRFV7Q==,type:str]
+kind: ENC[AES256_GCM,data:7AO6cFL9,iv:q3pEo5EyvGefq5FfO39BzKrxobmwmP3ucqJWJr16Sd4=,tag:Nf/D5OpGbC7/Q+DksXkrDA==,type:str]
+metadata:
+    name: ENC[AES256_GCM,data:JwGj7ZYYt+p0C3rb,iv:KBAIsUAZifo0DvnwERWC9jAS3/FqQp+xR/PlYEwb+Rc=,tag:+WNy/hxofiZqrNx47GXhng==,type:str]
+    namespace: ENC[AES256_GCM,data:uIYk8VVfTt3olc8=,iv:JJgClHDRSVFcqhLXRkUaqsFNGmRuhn7DFddQQUOsQ/I=,tag:Pt9S0vh7LBEngGv5cowIIg==,type:str]
+type: ENC[AES256_GCM,data:YXxX6W6B,iv:EoRzU+ZYujkZ3pllE1HsC+6OeXi76NYMGLCx0x3Ax8A=,tag:61ovlMBf9keouaC05vzBsg==,type:str]
+stringData:
+    username: ENC[AES256_GCM,data:iBU2Yg==,iv:g513DvhT1bEFiES1rZIwQoYEXDdgufV0WsxoHFfHPyk=,tag:sfBQGmgnlV5f44mVbpzw3g==,type:str]
+    password: ENC[AES256_GCM,data:gwiwUp2NEyoggKjdwW2egTrtyikDAGZbidDqyw0XWGV7EuGMC4AyHg==,iv:37XMAP8RihWBSsy9Cp4WkXYblPJYj3Lvwk7wKGslw2Q=,tag:qshRZ4bca+aanyBTS4E3jg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMcGs2TllOQ3BKYkdsNHVW
+            TUdibGZaYzF2SFFRamR2OG9DZU1QOTlwZlVFCi94ZC9IMllGYlQ4RTFxaU9JTFVN
+            QlZoVTU0NTgvc2NxRmNLUW9kbGcwVHcKLS0tIFUzTi9NQUQ0SGwwSkQ0R1R4S1Fz
+            TDN4MEdQWFR6UG5JWTJxbnBIdUtGRncKpQGTF/9PC7c3ZFDMAaSchNpQVrc+ZCsM
+            NNJQ5uwGiAqNMAIwphbFij/xapi4dWzm1jVYkasNdNczyQfwrq8fsg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-03-30T19:42:06Z"
+    mac: ENC[AES256_GCM,data:JkWx4t3t/6w3s+ZbfhJpEcrnvCdl3KgbgloJOTiL5FKSIQXk7K2Fz0R3b5nX+whMbPh32m+uV3jbeRn1dgqig+e7QBGbKFI/W1IoYWJxTU3SkIHXDXI8Kl6gDAj4KdQbzpk0tLCnOxQuRqlXqP+pFIDG8WlV8K+ehV2+TqjuiYE=,iv:F2HWcsCudLweA85zI9RF60RYxqOHmMFjbMcScz9IPp0=,tag:AUX4kFaiRGgT41bqYzF7KQ==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.4
diff --git a/clusters/homelab/flux-system/kustomization.yaml b/clusters/homelab/flux-system/kustomization.yaml
index 3842229..650167c 100644
--- a/clusters/homelab/flux-system/kustomization.yaml
+++ b/clusters/homelab/flux-system/kustomization.yaml
@@ -3,3 +3,4 @@ kind: Kustomization
 resources:
 - gotk-components.yaml
 - gotk-sync.yaml
+- forgejo-auth.sops.yaml