nixConfig/.sops.yaml

27 lines
739 B
YAML
Raw Normal View History

2023-09-25 19:03:23 +00:00
keys:
- &nerf age1rasjnr2tlv9y70sj0z0hwpgpxdc974wzg5umtx2pnc6z0p05u3js6r8sln
2024-03-21 15:58:39 +00:00
- &gonne age1xv5rfxkxg9jyqx5jg2j82cxv7w7ep4a3795p4yl5fuqf38f3m3eqfnefju
2023-09-25 19:03:23 +00:00
- &nyarlathotep age1s99d0vlj5qlm287n98jratql5fypvjrxxal0k5jl2aw9dcc8kyvqw5yyt4
2024-03-21 15:58:39 +00:00
- &bragi age1lqvgpmlemyg9095ujck64u59ma29656zs7a4yxgz4s6u5cld2ccss69jwe
2023-09-25 19:03:23 +00:00
creation_rules:
2024-03-21 15:58:39 +00:00
- path_regex: nixos/machines/nyarlathotep/.*
2023-09-25 19:03:23 +00:00
key_groups:
- age:
2024-03-21 15:58:39 +00:00
- *nerf
- *gonne
- *nyarlathotep
- path_regex: nixos/machines/bragi/.*
key_groups:
- age:
- *nerf
- *gonne
- *bragi
2023-09-25 19:03:23 +00:00
# this is the catchall clause if nothing above machtes. Encrypt to users but not
# to machines
- key_groups:
- age:
2024-03-21 15:58:39 +00:00
- *nerf
- *gonne