.sops.yaml

keys:
  # users
  - &spencer E2E7C16A57C8F7794F0EFDA16A3F9D0EB5A1B8D8
  # hosts
  - &magnolia age193pvcgqnuvey5v9krh03hz0xtntp89repupgywl052ft92asm9asxphkvf
  - &oak age1hsmsx3jpmlw56e638l0wx62lhtaz7kanr9az4yq7mzv074x8cayqwrgxe3
  - &redbud age1d5flajxfrhulqvggeu3ldv9z38m5802jmee49efywadx9uhhku4qsk3rzy
  - &warden age19qp3wj8v5zksrqygezcz9twk4dsgg27dnqyjlfskw7pd63akys7q26v0gs

creation_rules:
  - path_regex: hosts/oak/secrets.ya?ml$
    key_groups:
    - age:
      - *oak
      pgp:
      - *spencer

  - path_regex: hosts/redbud/secrets.ya?ml$
    key_groups:
    - age:
      - *redbud
      pgp:
      - *spencer

  - path_regex: hosts/warden/secrets.ya?ml$
    key_groups:
    - age:
      - *warden
      pgp:
      - *spencer

  - path_regex: hosts/common/secrets.ya?ml$
    key_groups:
    - age:
      - *magnolia
      - *oak
      - *redbud
      - *warden
      pgp:
      - *spencer