nixos/.sops.yaml at master · fbosch/nixos · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
keys:
  - &rvn-pc age1f8fyxkldde3wkhlfsccmn72tscr94yhtk34yzqk56d0vmxur6cusuf0208
  - &Frederiks-Macbook-Pro age1vv6myqr6f8t594rpe5s24udml7a375zte62swfalnuecgf286fespyajgs
  - &Frederiks-Macbook-Pro-system age1pxd5w4wmh7zwgu5xpxew0astg9e9x0nn6u4lltf4hy520z9avd5q5rm5re
  - &rvn-srv age1u2rhqmpquey2qwdrqmggxtfdf46hv4tlsxywm4yyahf0xnwuy3msa7edup
  - &admin 5E0FEC74518ED5FEAA5EA33E5C49A562D850322A
  - &rvn-vm age1d3cj77x9fpr3epm66l5ff2ptwyv55pf6sh9p5fw7f6ffkseuayqs427r79
  - &fbb-user age1qvnp38vf03rypemwah5t3khtypkh8tdz2n6rv88eemuuupsv39eqaele9g

creation_rules:
  - path_regex: secrets/secrets\.yaml$
    key_groups:
      - pgp:
          - *admin
        age:
          - *Frederiks-Macbook-Pro-system
          - *rvn-srv
          - *rvn-vm
          - *fbb-user
  - path_regex: secrets/common\.yaml$
    key_groups:
      - pgp:
          - *admin
        age:
          - *rvn-pc
          - *Frederiks-Macbook-Pro
          - *Frederiks-Macbook-Pro-system
          - *rvn-srv
          - *fbb-user
  - path_regex: secrets/apis\.yaml$
    key_groups:
      - pgp:
          - *admin
        age:
          - *rvn-pc
          - *Frederiks-Macbook-Pro
          - *Frederiks-Macbook-Pro-system
          - *rvn-srv
          - *fbb-user
  - path_regex: secrets/containers\.yaml$
    key_groups:
      - pgp:
          - *admin
        age:
          - *rvn-srv
  - path_regex: secrets/development\.yaml$
    key_groups:
      - pgp:
          - *admin
        age:
          - *rvn-pc
          - *Frederiks-Macbook-Pro-system
          - *rvn-srv
          - *fbb-user