.sops.yaml - nixfiles

1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 
31 
32 
33 
34 
35 
36 
37 
38 
39 
40 
41 
42 
43 
44 
45 
46 
47 
48 
49 
50 
keys:
    - &katja 9D7CACD7039E5AD616FD25879F935DB630A167E7
    - &void 321EFA52CF155E9FD646279E0FB0CA11985EB5F6
    - &huntii age1laajqafnm4ft2m73wq7yqug4ts04ddn59wlqs4t30upeqa35dpdqu8fu3n
    - &morio age1wpffcr5p88a2x9dzx5v3sq4jqurvygu94fx773n229fqk4p95qzs840cmn
    - &novus age1tud4lvpmpx5nqceyp09ls9ej8l80zlh29d8cpjxcajfnnyy85fvqs63snm
    - &polaris age1qyqy5we7zua06ppj654rgd6t7kyw3gem6hnexna98j60klyus4zq68cjlz

creation_rules:
    - path_regex: secrets/common\.yaml$
      key_groups:
          - age:
                - *huntii
                - *morio
                - *novus
                - *polaris
            pgp:
                - *katja
                - *void
    - path_regex: secrets/huntii\.yaml$
      key_groups:
          - age:
                - *huntii
            pgp:
                - *katja
    - path_regex: secrets/morio\.yaml$
      key_groups:
          - age:
                - *morio
            pgp:
                - *katja
    - path_regex: secrets/novus\.yaml$
      key_groups:
          - age:
                - *novus
            pgp:
                - *katja
    - path_regex: secrets/polaris\.yaml$
      key_groups:
          - age:
                - *polaris
            pgp:
                - *katja
    - path_regex: secrets/zaphyra/sieve\.yaml$
      key_groups:
          - age:
                - *morio
            pgp:
                - *katja
                - *void