diff options
author | Gregor Kleen <gkleen@yggdrasil.li> | 2024-07-30 15:22:50 +0200 |
---|---|---|
committer | Gregor Kleen <gkleen@yggdrasil.li> | 2024-07-30 15:22:50 +0200 |
commit | bf329299d3c412bdbe6d1145b0947e6950c5c548 (patch) | |
tree | ced74c587ea71ad41df5258255fae7415a4a682e /.sops.yaml | |
parent | cd3c763cadbe887d5918f91619a836227d9e3846 (diff) | |
download | nixos-bf329299d3c412bdbe6d1145b0947e6950c5c548.tar nixos-bf329299d3c412bdbe6d1145b0947e6950c5c548.tar.gz nixos-bf329299d3c412bdbe6d1145b0947e6950c5c548.tar.bz2 nixos-bf329299d3c412bdbe6d1145b0947e6950c5c548.tar.xz nixos-bf329299d3c412bdbe6d1145b0947e6950c5c548.zip |
...
Diffstat (limited to '.sops.yaml')
-rw-r--r-- | .sops.yaml | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/.sops.yaml b/.sops.yaml new file mode 100644 index 00000000..0dba3f40 --- /dev/null +++ b/.sops.yaml | |||
@@ -0,0 +1,28 @@ | |||
1 | keys: | ||
2 | - &admin_gkleen age1rmmhetcmllq0ahl5qznlr0eya2zdxwl9h6y5wnl97d2wtyx5t99sm2u866 | ||
3 | - &machine_surtr age19a7j77w267z04zls7m28a8hj4a0g5af6ltye2d5wypg33c3l89csd4r9zq | ||
4 | - &machine_vidhar age1qffdqvy9arld9zd5a5cylt0n98xhcns5shxhrhwjq5g4qa844ejselaa4l | ||
5 | - &machine_sif age1fj65apkhfkrwyv5tx6zcs9nkjg8267fy733qph30sc7zfn7vapjqkd5kne | ||
6 | |||
7 | creation_rules: | ||
8 | - path_regex: surtr[^\/]*$ | ||
9 | key_groups: | ||
10 | - age: [ *admin_gkleen, *machine_surtr ] | ||
11 | - path_regex: vidhar[^\/]*$ | ||
12 | key_groups: | ||
13 | - age: [ *admin_gkleen, *machine_vidhar ] | ||
14 | - path_regex: sif[^\/]*$ | ||
15 | key_groups: | ||
16 | - age: [ *admin_gkleen, *machine_sif ] | ||
17 | - path_regex: ^hosts/surtr/ | ||
18 | key_groups: | ||
19 | - age: [ *admin_gkleen, *machine_surtr ] | ||
20 | - path_regex: ^hosts/vidhar/ | ||
21 | key_groups: | ||
22 | - age: [ *admin_gkleen, *machine_vidhar ] | ||
23 | - path_regex: ^hosts/sif/ | ||
24 | key_groups: | ||
25 | - age: [ *admin_gkleen, *machine_sif ] | ||
26 | - path_regex: ^modules/yggdrasil/hosts/sif/ | ||
27 | key_groups: | ||
28 | - age: [ *admin_gkleen, *machine_sif ] | ||