-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy path.sops.yaml
74 lines (74 loc) · 2.01 KB
/
.sops.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
keys:
# nix run nixpkgs#ssh-to-age -- -i ~/.ssh/id_ed25519.pub
- &dguibert 3198EB02EB0EEC85FE5BF6AC4E6EE5C219FDD513
- &dguibert_titan_age age1gthhn69gtgn8gsvv58xqu9vxfnczl68kktm64638xfv5j3qm4grqeuw0h4
- &dguibert_t580_age age1zpv9vp6rkcttpg8yk5qk8yjh4kxh6pj9d3uvzfekglth6mfc0drqekue6r
- &titan_age age1ejsy39scvjujs392lrrx99cs7qx8j746wcasau2z8jp6h27l3dfsrne8w9
#rpi41 00064376b1bf4617928161cd5b5318afcd030f01 (20201218)
- &rpi41_age age1lml6xd6l7ntypmtmv7rsqxzguln5puynzlv2yf3k99hrr48l3ppq6nw3t3
- &rpi31_age age1wv2t950m6rw5a5jl2qfg0ejrlpdxyn8x4nykhpqv00476cd299rqnutzkd
- &t580_age age1e6up3vv3av0tlsp9lcmfxqga07r6d3ccahzzdp7een7facm5ps0qztps7l
creation_rules:
# dguibert
- path_regex: modules/home-manager/dguibert/[^/]+-sec\.nix$
key_groups:
- pgp:
- *dguibert
# dguibert
# titan
- path_regex: hosts/titan/secrets/[^/]+\.yaml$
key_groups:
- pgp:
- *dguibert
age:
- *titan_age
# dguibert
# rpi41
- path_regex: hosts/rpi41/secrets/[^/]+\.yaml$
key_groups:
- pgp:
- *dguibert
age:
- *rpi41_age
# dguibert
# rpi31
- path_regex: hosts/rpi31/secrets/[^/]+\.yaml$
key_groups:
- pgp:
- *dguibert
age:
- *rpi31_age
# dguibert
# t580
- path_regex: hosts/t580/secrets/[^/]+\.yaml$
key_groups:
- pgp:
- *dguibert
age:
- *t580_age
# dguibert
- path_regex: secrets/[^/]+\.yaml$
key_groups:
- pgp:
- *dguibert
age:
- *rpi31_age
- *rpi41_age
- *t580_age
- *titan_age
- path_regex: modules/home-manager/dguibert/[^/]+-sec\.el$
key_groups:
- pgp:
- *dguibert
age:
- *rpi31_age
- *rpi41_age
- *t580_age
- *titan_age
- path_regex: modules/home-manager/dguibert/[^/]+\.yaml$
key_groups:
- pgp:
- *dguibert
age:
- *dguibert_titan_age
- *dguibert_t580_age