nixos-config/.sops.yaml

keys:
  - &makefu F7B8DCE46BC6B0A8F95477C8563B8DFE2A0E2029
  - &x_host age1hqe5hs2jz2fk5zvw346ajhwlagkheunacahpu42uruxu0nlnwy7qn9q5k6
  - &tsp_host age1p7jqdpahxtf7j70kmzy7vg6za7wg63u6sq7ywuw6qkw0qek395nq5kyzae
creation_rules:
  - path_regex: secrets/common.yaml$
    key_groups:
    - pgp:
      - *makefu
      age:
      - *tsp_host
      - *x_host
  # host secrets
  - path_regex: secrets/x.yaml$
    key_groups:
    - pgp:
      - *makefu
      age:
      - *x_host
  - path_regex: secrets/tsp.yaml$
    key_groups:
    - pgp:
      - *makefu
      age:
      - *tsp_host
init secrets 2023-06-10 20:53:47 +02:00			`keys:`
			`- &makefu F7B8DCE46BC6B0A8F95477C8563B8DFE2A0E2029`
			`- &x_host age1hqe5hs2jz2fk5zvw346ajhwlagkheunacahpu42uruxu0nlnwy7qn9q5k6`
sops: add keys for tsp,x 2023-06-14 23:35:56 +02:00			`- &tsp_host age1p7jqdpahxtf7j70kmzy7vg6za7wg63u6sq7ywuw6qkw0qek395nq5kyzae`
init secrets 2023-06-10 20:53:47 +02:00			`creation_rules:`
			`- path_regex: secrets/common.yaml$`
			`key_groups:`
			`- pgp:`
			`- *makefu`
sops: ensure key-groups are correctly created 2023-06-11 00:32:09 +02:00			`age:`
sops: add keys for tsp,x 2023-06-14 23:35:56 +02:00			`- *tsp_host`
init secrets 2023-06-10 20:53:47 +02:00			`- *x_host`
			`# host secrets`
sops: add keys for tsp,x 2023-06-14 23:35:56 +02:00			`- path_regex: secrets/x.yaml$`
init secrets 2023-06-10 20:53:47 +02:00			`key_groups:`
			`- pgp:`
			`- *makefu`
sops: ensure key-groups are correctly created 2023-06-11 00:32:09 +02:00			`age:`
init secrets 2023-06-10 20:53:47 +02:00			`- *x_host`
sops: add keys for tsp,x 2023-06-14 23:35:56 +02:00			`- path_regex: secrets/tsp.yaml$`
			`key_groups:`
			`- pgp:`
			`- *makefu`
			`age:`
			`- *tsp_host`