nixos/.sops.yaml

37 lines
1.1 KiB
YAML

keys:
# Hosts keys are age keys derived from the host ssh key.
- &neo age1ed9esfstrdhfl3650mv4j3mjyum70245f903ye6g0f5t2ept73nqyksh3g
- &redite age1utlywxylme0z3jenv4uz8ftcwteg9877y3zf46fu7zwjjwa05g7q88w8t0
- &two age1zlpu6qum5xcl07hnsndp78tllqph5jz7q8fr5ntxr88202xq9u9s9r2y7x
- &vaultwarden age1clr7403040zv88tljfjya9lwkk2a0hxjqy7rhy4kz6uu69m2ascqux6v6x
# Nounou keys.
- &_aeltheos 0x39B1E6BB45C0AD18A71E89C4DF6D6CE9E95E26E8
- &_gabo 0x270A71E7908CA9D9252000B01EFEFDF3F7B80B01
- &_korenstin 0xA534E46682DD8C35377352C88DD28608BE411065
- &_lzebulon 0xFF7D1156D33F4060A4B15BFBD6CDAB8050CBBE7D
- &_pigeonmoelleux 0xFA47BDA260489ADA
creation_rules:
# Secrets that are shared accross all hosts.
- path_regex: secrets/common.yaml
key_groups:
- pgp :
- *_aeltheos
- *_gabo
- *_korenstin
- *_lzebulon
- *_pigeonmoelleux
age :
- *neo
- *redite
- *two
- *vaultwarden
# Secrets for neo.
- path_regex: secrets/neo.yaml
key_groups:
- pgp:
- *_aeltheos
- *_pigeonmoelleux