.sops.yaml

keys:
  - &adomas C120E76F97BBAB21F04B0B11F299EE66602E7FD1
  - &laptop age1x2y06lakj45fatncs8clsnzzkrsj3hl4vdut9qwsd0epuveusqyqk3h26u
  - &work age1davevp82crerwkczlus55cehpr48e3mmpmyx2g6gxg37a8257uasndwpvu
  - &pi age1n7jt7lxh9u26u25ggaltvt3xsjqg8rsaakjcm4lrykzn70l40s0qjp9vqu
  - &t14 age18shz3w4pvxqvagegx50dq8ujcjaq6xa56ptqlqna255xxx4jp9lsu6qjna
  - &pc age1970uksmphn9sggda6mqh32g9nk9tnh6qrxg54rg3dwclrj9vugfscev2uw
creation_rules:
  - path_regex: nixos/common-secrets/(zerotier|wireguard)\.yaml$
    key_groups:
      - pgp:
          - *adomas
        age:
          - *laptop
          - *work
          - *pi
          - *t14
          - *pc
  - path_regex: nixos/common-secrets/vpnc\.conf$
    key_groups:
      - pgp:
          - *adomas
        age:
          - *pi
          - *t14
  - path_regex: nixos/home/secrets/[^/]+\.yaml$
    key_groups:
      - pgp:
          - *adomas
        age:
          - *laptop
  - path_regex: nixos/pc/secrets/[^/]+\.yaml$
    key_groups:
      - pgp:
          - *adomas
        age:
          - *pc
  - path_regex: nixos/t14/secrets/[^/]+\.yaml$
    key_groups:
      - pgp:
          - *adomas
        age:
          - *t14
  - path_regex: nixos/work/secrets/[^/]+\.yaml$
    key_groups:
      - pgp:
          - *adomas
        age:
          - *work
  - path_regex: nixos/pi/secrets/[^/]+\.(yaml|env)$
    key_groups:
      - pgp:
          - *adomas
        age:
          - *pi