nixfiles/.sops.yaml

34 lines
No EOL
686 B
YAML

keys:
- &kat CD8CE78CB0B3BDD4 # https://inskip.me/pubkey.asc
- &mew 65BD3044771CB6FB
- &yukari age1n4kdchmkk3rfkaknxhveqr2ftprdpgwckutt23y6u8639lazzuks77tgav
creation_rules:
- path_regex: terraform_secrets.yaml$
shamir_threshold: 1
key_groups:
- pgp:
- *kat
- path_regex: roles/[^/]+/secrets\.yaml$
shamir_threshold: 1
key_groups:
- pgp:
- *kat
age:
- *yukari
- path_regex: systems/.*\.yaml$
shamir_threshold: 1
key_groups:
- pgp:
- *kat
age:
- *yukari
- path_regex: cluster/cluster.tfvars.sops$
shamir_threshold: 1
key_groups:
- pgp:
- *kat
- path_regex: tf/tf.tfvars.sops$
shamir_threshold: 1
key_groups:
- pgp:
- *kat