summaryrefslogtreecommitdiff
path: root/.sops.yaml
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2023-01-30 12:20:23 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2023-01-30 12:20:23 +0100
commitcfc871cce6aefaa0ff64619780a807cba761c6b2 (patch)
tree965e8276ed36f11698b6c7d6eadab9f88d5f97c5 /.sops.yaml
parentaa54fe89b98d354d21141c589332ce7950ef2e59 (diff)
downloadnixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar
nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar.gz
nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar.bz2
nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.tar.xz
nixos-cfc871cce6aefaa0ff64619780a807cba761c6b2.zip
...
Diffstat (limited to '.sops.yaml')
-rw-r--r--.sops.yaml39
1 files changed, 39 insertions, 0 deletions
diff --git a/.sops.yaml b/.sops.yaml
new file mode 100644
index 00000000..268904a1
--- /dev/null
+++ b/.sops.yaml
@@ -0,0 +1,39 @@
1keys:
2 - &admin_gkleen 30D3453B8CD02FE2A3E7C78C0FB536FB87AE8F51
3 - &machine_surtr age19a7j77w267z04zls7m28a8hj4a0g5af6ltye2d5wypg33c3l89csd4r9zq
4 - &machine_sif age1ure0athvtnaqqw48pe0y3upqdzmkaen9h70yggd9va4hva6avd8qqm6s4d # F1AF20B9511B63F681A14E8D51AEFBCD1DEF68F8
5 - &machine_vidhar age1qffdqvy9arld9zd5a5cylt0n98xhcns5shxhrhwjq5g4qa844ejselaa4l # A1C7C95E6CAF0A965CB47277BCF50A89C1B1F362
6
7creation_rules:
8 - path_regex: ^hosts/surtr/vpn/surtr\.priv$
9 key_groups:
10 - age: [ *machine_surtr ]
11 pgp: [ *admin_gkleen ]
12 - path_regex: ^hosts/surtr/vpn/sif\.priv$
13 key_groups:
14 - age: [ *machine_sif ]
15 pgp: [ *admin_gkleen ]
16 - path_regex: ^hosts/surtr/email/ca/[^/]+.*$
17 key_groups:
18 - pgp: [ *admin_gkleen ]
19 - path_regex: ^hosts/surtr/vpn/[^/]+.*$
20 - path_regex: ^(.*/)?surtr(-private)?(/.+|\..+)?$
21 key_groups:
22 - age: [ *machine_surtr ]
23 pgp: [ *admin_gkleen ]
24 - path_regex: ^hosts/vidhar/borg/jotnar/ymir$
25 key_groups:
26 - pgp: [ *admin_gkleen ]
27 - path_regex: ^hosts/vidhar/borg/jotnar/[^/]+.*$
28 - path_regex: ^hosts/vidhar/(prometheus|pgbackrest)/ca/[^/]+.*$
29 key_groups:
30 - pgp: [ *admin_gkleen ]
31 - path_regex: ^(.*/)?vidhar(-private)?(/.+|\..+)?$
32 key_groups:
33 - age: [ *machine_vidhar ]
34 pgp: [ *admin_gkleen ]
35 - path_regex: ^(.*/)?sif(-private)?(/.+|\..+)?$
36 key_groups:
37 - age: [ *machine_sif ]
38 pgp: [ *admin_gkleen ]
39