keys:
  # Hosts keys are age keys derived from the host ssh key.
  - &neo age1ed9esfstrdhfl3650mv4j3mjyum70245f903ye6g0f5t2ept73nqyksh3g
  - &redite age1utlywxylme0z3jenv4uz8ftcwteg9877y3zf46fu7zwjjwa05g7q88w8t0
  - &two age1zlpu6qum5xcl07hnsndp78tllqph5jz7q8fr5ntxr88202xq9u9s9r2y7x
  - &vaultwarden age1clr7403040zv88tljfjya9lwkk2a0hxjqy7rhy4kz6uu69m2ascqux6v6x

  # Nounou keys.
  - &_aeltheos 0x39B1E6BB45C0AD18A71E89C4DF6D6CE9E95E26E8
  - &_gabo 0x270A71E7908CA9D9252000B01EFEFDF3F7B80B01
  - &_korenstin 0xA534E46682DD8C35377352C88DD28608BE411065
  - &_lzebulon 0xFF7D1156D33F4060A4B15BFBD6CDAB8050CBBE7D
  - &_pigeonmoelleux 0xFA47BDA260489ADA

creation_rules:
  # Secrets that are shared accross all hosts.
  - path_regex: secrets/common.yaml
    key_groups:
    - pgp :
      - *_aeltheos
      - *_gabo
      - *_korenstin
      - *_lzebulon
      - *_pigeonmoelleux
      age :
      - *neo
      - *redite
      - *two
      - *vaultwarden

  # Secrets for neo.
  - path_regex: secrets/neo.yaml
    key_groups:
    - pgp:
      - *_aeltheos
      - *_pigeonmoelleux