# Complete Secrets Restore Instructions

## Master Encrypted Backup

This is your complete backup of all private keys, certificates, and sensitive configurations.

### What's Included
- SSH keys and configuration
- GPG private keys and keyring  
- Docker authentication
- Application licenses
- Any other sensitive configuration files

### Restore Process

#### Step 1: Decrypt the backup
```bash
gpg --decrypt all_secrets_TIMESTAMP.tar.gz.gpg > all_secrets_TIMESTAMP.tar.gz
```

#### Step 2: Extract to temporary location first
```bash
mkdir ~/restore_temp
tar -xzf all_secrets_TIMESTAMP.tar.gz -C ~/restore_temp
```

#### Step 3: Review and restore selectively
```bash
# SSH (if needed)
cp -r ~/restore_temp/secrets/.ssh ~/
chmod 700 ~/.ssh
chmod 600 ~/.ssh/config ~/.ssh/*_rsa ~/.ssh/id_*
chmod 644 ~/.ssh/*.pub

# GPG (if needed)
cp -r ~/restore_temp/secrets/.gnupg ~/
chmod 700 ~/.gnupg
chmod 600 ~/.gnupg/*
chmod 700 ~/.gnupg/private-keys-v1.d
chmod 600 ~/.gnupg/private-keys-v1.d/*
gpgconf --kill gpg-agent  # Restart GPG agent

# Docker (if needed)
mkdir -p ~/.docker
cp ~/restore_temp/secrets/.docker/config.json ~/.docker/

# Other files as needed
```

#### Step 4: Cleanup
```bash
rm -rf ~/restore_temp
rm all_secrets_TIMESTAMP.tar.gz
```

## Security Notes

- This backup contains ALL your private keys and secrets
- Keep it in multiple secure locations
- Test restore process periodically
- Never store unencrypted - always use GPG encryption

Created: $(date)
System: $(sw_vers -productVersion)