From 97b6db4d0c1223de733fd2fef9e57c370e31cc5e Mon Sep 17 00:00:00 2001
From: sascha <sascha@automation1.local>
Date: Sat, 4 Apr 2026 09:43:37 +0200
Subject: [PATCH] feat: add sops+age secrets encryption

---
 .gitignore | 5 +++++
 .sops.yaml | 3 +++
 2 files changed, 8 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 .sops.yaml

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..42b1db6
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,5 @@
+# Secrets - nur verschlüsselt committen
+.env
+.env.*
+!.env.enc
+!.env.*.enc
diff --git a/.sops.yaml b/.sops.yaml
new file mode 100644
index 0000000..672e10e
--- /dev/null
+++ b/.sops.yaml
@@ -0,0 +1,3 @@
+creation_rules:
+  - path_regex: \.env.*$
+    age: "age1z8gak2l4h0vpcnhtcdxmem2u9h2n54vuksk8ys82609qtzampuvqh50wdr"