summaryrefslogtreecommitdiff
path: root/.sops.yaml
blob: 6fad758823449f5c94a561dd7305df2dfe937720 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
keys:
  - &users:
    - &ebisu age1slfnfst9x5s4557qtpmypwul337plw8cv9vena4ufwcets5gg55s2z95vy
  - &hosts:
    - &kansai age1epapum5m42qz9rf6nthadtlv74uxux5xqfwkcs3ly875ft5r236ql7lh5h
    - &himeji age14dpp7649l9j8yt4kmnk90pnxplq3eur9xq2t3ujsrqk5luyj8fzq45dghu
    - &akashi age1zw2q6fqm8zf6swcdrqxyng08ev5xg0s8m5u93q40h5ul3yu8ddwq9q6vfu
    - &kioku age1zjdjg900vzaeam4vlr4ah09c6g28h9yzq0zvx4zm0vnl909lfawqfn3pj9
    - &hoka age19xlhzf6guy3df2f3m4l3swn539a4cdsl5vct9tmerrfpqukmwvys5y50wn
    - &nara age1jq3yx0cmxrcamw9zgljzj0c3dh2m2frdde5ff5j6jqdze0suhg3s5xtj66
    - &utm age1mryvhwtap8h47st24qpg6t4s0xgjmpkvvsmgmnzvt6lvkwqy7caqvz9ul3

creation_rules:
  - path_regex: secrets/hosts.ya?ml$
    key_groups:
      - age:
          - *kansai
          - *himeji
          - *akashi
          - *kioku
          - *hoka
          - *nara
          - *utm
  - path_regex: secrets/ebisu.ya?ml$
    key_groups:
      - age:
          - *ebisu
  - path_regex: secrets/kansai.ya?ml$
    key_groups:
      - age:
          - *kansai
  - path_regex: secrets/((himeji.ya?ml)|fuwnme_hs_ed25519_secret_key.bin)$
    key_groups:
      - age:
          - *himeji