nix-config/.sops.yaml at main · alisonjenkins/nix-config · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
keys:
  - &admin_ali age1rne0eqj5jfqahm5s5mmp3u0v97xm0lvwm2ghtjlv4p7m0l78tq5stgjtu4
  - &ali_personal age1efmxs2w78yw0knq7hvzxjsanphqgrx2mj5p5grkye590yq4rjexs5zvvzg
  - &server_ali-desktop age1enyaj2wdty5kpu8n2tfx2eswww7743ewxf7ykfmsdaqz0w5f4dqqx54eps
  - &server_download-server-1 age1dket3z3j325e0vt3ynwaxxzume9sv0qcphvumaqk2ew7htmd93us4tncsw
  - &server_home-k8s-master-1 age1hrzy6fzhhxznvhs672pja4jg40vew3ed4n8lszyw3zxpz43yfv5qvmzpjq
  - &server_ali-work-laptop age1nupldhcp9judxvzt7ytdzdq3pph58kuucd4kln3m8ez5fc74l9kqdg3weq
  - &server_home-storage-server-1 age1qs58x4rqva0s5mkwx0dul2akfnrwvarjkt2x75qtaz0g3mhzpezssj0wmx
creation_rules:
  - path_regex: ^secrets/niks3-token\.enc\.yaml$
    key_groups:
    - age:
      - *admin_ali
      - *ali_personal
      - *server_ali-desktop
      - *server_ali-work-laptop
  - path_regex: ^secrets/[^/]+\.(yaml|json|env|ini)$
    key_groups:
    - age:
      - *admin_ali
      - *ali_personal
  - path_regex: ^secrets/ali-desktop/[^/]+\.(yaml|json|env|ini|bin)$
    key_groups:
    - age:
      - *admin_ali
      - *ali_personal
      - *server_ali-desktop
  - path_regex: ^secrets/ali-framework-laptop/[^/]+\.(yaml|json|env|ini|bin)$
    key_groups:
    - age:
      - *admin_ali
      - *ali_personal
  - path_regex: ^secrets/ali-work-laptop/[^/]+\.(yaml|json|env|ini|bin)$
    key_groups:
    - age:
      - *admin_ali
      - *ali_personal
      - *server_ali-work-laptop
  - path_regex: ^secrets/home-k8s-master-1/[^/]+\.(yaml|json|env|ini|bin)$
    key_groups:
    - age:
      - *admin_ali
      - *ali_personal
      - *server_home-k8s-master-1
  - path_regex: ^flake-modules/hosts/home-storage-server-1/secrets/[^/]+\.(yaml|json|env|ini|bin)$
    key_groups:
    - age:
      - *admin_ali
      - *ali_personal
      - *server_home-storage-server-1
  - path_regex: ^flake-modules/hosts/download-server-1/secrets/[^/]+\.(yaml|json|env|ini|bin)$
    key_groups:
    - age:
      - *admin_ali
      - *ali_personal
      - *server_download-server-1