Thore CimbalandClaude Sonnet 5 5bcbadd06a feat(coturn): add scoped age recipient for automated rotation job ...

Adds a second age recipient (dedicated keypair, private key never touches
the repo) to just these two files, so the upcoming rotation CronJob can
decrypt/re-encrypt them without needing the repo's master sops-age key,
which can decrypt every secret in the repo. Verified: master key still
decrypts both files; the new scoped key can decrypt both files but
correctly cannot decrypt an unrelated secret (authentik-secret.yaml).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-28 21:13:27 +02:00

..

authentik

fix(backup): retry pg_dump connection to survive NetworkPolicy sync lag

2026-07-28 20:38:29 +02:00

base

fix: restore correct file permissions, stop tracking .DS_Store

2026-07-28 17:28:22 +02:00

monitoring

Fix HelmRepository API version

2026-04-24 16:18:17 +02:00

production

feat(coturn): add scoped age recipient for automated rotation job

2026-07-28 21:13:27 +02:00