.sops.yaml - nixfiles

1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 
31 
32 
33 
34 
35 
36 
37 
38 
39 
40 
41 
42 
43 
44 
45 
46 
47 
48 
49 
50 
51 
52 
53 
54 
55 
56 
57 
58 
59 
60 
61 
62 
63 
64 
65 
66 
67 
68 
69 
70 
71 
72 
keys:
    - &zaphyra BFE6386C8D66BCD4DAE14FC895F0FE7CD7E6A022
    - &cautus age1yln5qratl82u6sqakh9gn2c0s88nzm62cw9muq5z4kzgp9wqpyzshhptq9
    - &sorrah age102glvtt2nwx4ymgjh85449exlhmzk56cayy9hkkpl82u6wm64qzqjar7ju
    - &isodon age10ujnqv3ttdw23f7jryjg4dtw83fj2wf275kv38f2qrtj5kk3hg4qf5uf3h
    - &cuvier age1wztgmu7rm4yvdr0x8xucwfmnf0sruafwjx2ttl9cvg54epn0qysqqnr5n3
    - &clevai age1q58tmhk5hxrfn86qymet3mznafdzuhwl47s8mt3nyn43pararc5sng7kag
    - &leucas age1enkp0mlswl30s4h7z4qvyha4cmc2n2exs0v97276q5mx0jc86ggs7g2dyq

creation_rules:
    - path_regex: secrets/common\.yaml$
      key_groups:
          - age:
                - *cautus
                - *sorrah
                - *isodon
                - *cuvier
                - *clevai
                - *leucas
            pgp:
                - *zaphyra

    - path_regex: secrets/cautus\.yaml$
      key_groups:
          - age:
                - *cautus
            pgp:
                - *zaphyra

    - path_regex: secrets/sorrah\.yaml$
      key_groups:
          - age:
                - *sorrah
            pgp:
                - *zaphyra

    - path_regex: secrets/isodon\.yaml$
      key_groups:
          - age:
                - *isodon
            pgp:
                - *zaphyra
    - path_regex: secrets/cuvier\.yaml$
      key_groups:
          - age:
                - *cuvier
            pgp:
                - *zaphyra
    - path_regex: secrets/clevai\.yaml$
      key_groups:
          - age:
                - *clevai
            pgp:
                - *zaphyra
    - path_regex: secrets/leucas\.yaml$
      key_groups:
          - age:
                - *leucas
            pgp:
                - *zaphyra
    - path_regex: secrets/zaphyra/sieve\.yaml$
      key_groups:
          - age:
                - *cautus
            pgp:
                - *zaphyra
    - path_regex: secrets/zaphyra/floractl\.yaml$
      key_groups:
          - age:
                - *cuvier
            pgp:
                - *zaphyra