.sops.yaml

@@ -1,6 +1,7 @@
 keys:
   - &nerf age1rasjnr2tlv9y70sj0z0hwpgpxdc974wzg5umtx2pnc6z0p05u3js6r8sln
   - &gonne age1epz92k2rkp43hkrg3u0jgkzhnkwx8y43kag7rvfzwl9wcddelvusyetxl7
+  - &daniel age1mmpdvzy6d23qyhrl55jtv3c25pus2wwfplx9tujmqps2xsreuv8qwc6gv5
 
   - &nyarlathotep age1s99d0vlj5qlm287n98jratql5fypvjrxxal0k5jl2aw9dcc8kyvqw5yyt4
   - &bragi age1lqvgpmlemyg9095ujck64u59ma29656zs7a4yxgz4s6u5cld2ccss69jwe
@@ -13,24 +14,28 @@ creation_rules:
       - age:
         - *nerf
         - *gonne
+        - *daniel
         - *nyarlathotep
   - path_regex: nixos/machines/bragi/.*
     key_groups:
       - age:
         - *nerf
         - *gonne
+        - *daniel
         - *bragi
   - path_regex: nixos/machines/lobon/.*
     key_groups:
       - age:
         - *nerf
         - *gonne
+        - *daniel
         - *lobon
   - path_regex: nixos/machines/nyarlathotep/.*
     key_groups:
       - age:
         - *nerf
         - *gonne
+        - *daniel
         - *nyarlathotep
   # this is the catchall clause if nothing above machtes. Encrypt to users but not
   # to machines
@@ -38,3 +43,4 @@ creation_rules:
       - age:
         - *nerf
         - *gonne
+        - *daniel