dotnix/.sops.yaml at master · crisp-su/dotnix · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
keys:
  - &nixos_operator__suu age1v35c8pstlm756dj5dsyu0qf7em8vcj4hsxc7cl26n43cmrzgyfyq0zj66v
  - &nixos_host__mochi age16jf7t96ymkuja7mhrmwpkuqrwwelfmxuxnza0wn7sl0yrsu93anqrzr282
  - &nixos_host__taco age14lcrpxnt4wyswqppf9t4xvqymnacvckkhsq4hw8gwx2ztx64rass7a0nj2
  - &nixos_host__vps-rainyun-gofer age1mpsgu5eywvyxxu0fsp4v5gfz5yrnusmr6u5rdjguwy6hwwgs4ycsv6dm35

creation_rules:
  # Secrets of user `suu`
  - path_regex: secrets/personal/suu/[^/]+\.(yaml|json|ini|env)$
    key_groups:
      - age:
          - *nixos_operator__suu

  # Global NixOS host secrets
  - path_regex: secrets/nixos/[^/]+\.(yaml|json|ini|env)$
    key_groups:
      - age:
          - *nixos_operator__suu
          - *nixos_host__taco

  # Secrets of host `mochi`
  - path_regex: secrets/nixos/mochi/[^/]+\.(yaml|json|ini|env)$
    key_groups:
      - age:
          - *nixos_operator__suu
          - *nixos_host__mochi

  # Secrets of host `taco`
  - path_regex: secrets/nixos/taco/[^/]+\.(yaml|json|ini|env)$
    key_groups:
      - age:
          - *nixos_operator__suu
          - *nixos_host__taco

  # Secrets of host `vps-rainyun-gofer`
  - path_regex: secrets/nixos/vps-rainyun-gofer/[^/]+\.(yaml|json|ini|env)$
    key_groups:
      - age:
          - *nixos_host__vps-rainyun-gofer