zaphyra's git: nixfiles

zaphyra's nixfiles

path: /.sops.yaml 1.85 KB | plain
1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 
31 
32 
33 
34 
35 
36 
37 
38 
39 
40 
41 
42 
43 
44 
45 
46 
47 
48 
49 
50 
51 
52 
53 
54 
55 
56 
57 
58 
59 
60 
61 
62 
63 
64 
keys:
    - &void AB27F5D1136B20D3149FBCC00389451731A3ADDD
    - &zaphyra BFE6386C8D66BCD4DAE14FC895F0FE7CD7E6A022
    - &huntii age1laajqafnm4ft2m73wq7yqug4ts04ddn59wlqs4t30upeqa35dpdqu8fu3n
    - &haueri age1enkp0mlswl30s4h7z4qvyha4cmc2n2exs0v97276q5mx0jc86ggs7g2dyq
    - &morio age1wpffcr5p88a2x9dzx5v3sq4jqurvygu94fx773n229fqk4p95qzs840cmn
    - &novus age1tud4lvpmpx5nqceyp09ls9ej8l80zlh29d8cpjxcajfnnyy85fvqs63snm
    - &pratorum age13f7t27x326hamq39qps2ygrftq3ylyn2nx8xga2kqaxgra2p748sphmetv
    - &polaris age1qyqy5we7zua06ppj654rgd6t7kyw3gem6hnexna98j60klyus4zq68cjlz

creation_rules:
    - path_regex: secrets/common\.yaml$
      key_groups:
          - age:
                - *huntii
                - *haueri
                - *morio
                - *novus
                - *polaris
                - *pratorum
            pgp:
                - *zaphyra
    - path_regex: secrets/huntii\.yaml$
      key_groups:
          - age:
                - *huntii
            pgp:
                - *zaphyra
    - path_regex: secrets/haueri\.yaml$
      key_groups:
          - age:
                - *haueri
            pgp:
                - *zaphyra
    - path_regex: secrets/morio\.yaml$
      key_groups:
          - age:
                - *morio
            pgp:
                - *zaphyra
    - path_regex: secrets/novus\.yaml$
      key_groups:
          - age:
                - *novus
            pgp:
                - *zaphyra
    - path_regex: secrets/pratorum\.yaml$
      key_groups:
          - age:
                - *pratorum
            pgp:
                - *zaphyra
    - path_regex: secrets/polaris\.yaml$
      key_groups:
          - age:
                - *polaris
            pgp:
                - *zaphyra
    - path_regex: secrets/zaphyra/sieve\.yaml$
      key_groups:
          - age:
                - *morio
            pgp:
                - *zaphyra