From 321790cfb435d2680b19077972e034ee099f8dd9 Mon Sep 17 00:00:00 2001
From: Jarrett Aiken <jarrett.aiken@achl.fr>
Date: Wed, 25 Feb 2026 21:06:50 -0500
Subject: [PATCH] Add encrypted credentials via git-crypt.

---
 .git-crypt/.gitattributes                         |   4 ++++
 .../ACE142C15F53182454DEE0802B45FEC5D0B181E7.gpg  | Bin 0 -> 295 bytes
 .gitattributes                                    |   1 +
 .gitignore                                        |   1 -
 creds.json                                        | Bin 0 -> 189 bytes
 flake.nix                                         |   1 +
 6 files changed, 6 insertions(+), 1 deletion(-)
 create mode 100644 .git-crypt/.gitattributes
 create mode 100644 .git-crypt/keys/default/0/ACE142C15F53182454DEE0802B45FEC5D0B181E7.gpg
 create mode 100644 creds.json

diff --git a/.git-crypt/.gitattributes b/.git-crypt/.gitattributes
new file mode 100644
index 0000000..665b10e
--- /dev/null
+++ b/.git-crypt/.gitattributes
@@ -0,0 +1,4 @@
+# Do not edit this file.  To specify the files to encrypt, create your own
+# .gitattributes file in the directory where your files are.
+* !filter !diff
+*.gpg binary
diff --git a/.git-crypt/keys/default/0/ACE142C15F53182454DEE0802B45FEC5D0B181E7.gpg b/.git-crypt/keys/default/0/ACE142C15F53182454DEE0802B45FEC5D0B181E7.gpg
new file mode 100644
index 0000000000000000000000000000000000000000..3b81302a744405efa11b5bca9cce0f89ff0789c3
GIT binary patch
literal 295
zcmV+?0oeY8UIPFC00000000sJ2S9z-$Fsu<{aeCJ4(+Q~VuV9#)UHwf@R377!5fV`
zKs_*{nMBbHJF~)QE0z^%CXD5$aj@}!j0QS9a&+^J*>7IY@_CbBr9O6Hby>lPks`6u
zzytx0y|Fs7M8$Ulk{)#<9xmqtnJ6ctCBpo<f<U8mb>iYa(1DezJ`5obT?hsSMVy!j
zaDecdd8H!Ht5Q_^&Jb2lYL~ZFsY+k&7~no+6ZR6K3=18Hpb%=MB5d=poZB<F6(bvz
zBnzM&f(ck9oXJS}ES~f+={DpcC?&1VwiQ%dSe`;z;ZCWUixG({BfrK@s}Z}u1f8K0
tkfkwYAtBc(w;cXBzTSceaH7_Ay2gZ1-!<0t4FB1Sn@OOMl`HxTr+efzgwFr~

literal 0
HcmV?d00001

diff --git a/.gitattributes b/.gitattributes
index 176a458..11412e8 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1 +1,2 @@
 * text=auto
+creds.json filter=git-crypt diff=git-crypt merge=git-crypt
diff --git a/.gitignore b/.gitignore
index b46becb..9b42106 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1 @@
 .direnv/
-creds.json
diff --git a/creds.json b/creds.json
new file mode 100644
index 0000000000000000000000000000000000000000..2dd43297c87a17f767cb49b60cb825c479fcc774
GIT binary patch
literal 189
zcmV;u07Cx&M@dveQdv+`0668Akl#3cF=g-wP8mx!S1xE_lR&4$9^t!hbtVOu$Iuw^
zVELJgd=ygxq$xhv|7nN%`?RL(dto42n<rw3u?3fbklMiZLl=OZIRW;BlW2NOunI1E
zS_4#QRCm>aTgwqbp$a~aa?7VE^~(s}n+ECff&l-uQ2vWWW#%(Q<nU#GZ}hH@5+7Le
r#$+ebyZVSb7gEZIgw8cpTq<6&C=x$RZTGECeDT;fCm;KC!8MCd`axMP

literal 0
HcmV?d00001

diff --git a/flake.nix b/flake.nix
index 716fbef..87a58b6 100644
--- a/flake.nix
+++ b/flake.nix
@@ -12,6 +12,7 @@
         devShells.default = pkgs.mkShell {
           buildInputs = with pkgs; [
             dnscontrol
+            git-crypt
           ];
         };
       }