nix-files/.sops.yaml

keys:
  - &user_desko_colin age1tnl4jfgacwkargzeqnhzernw29xx8mkv73xh6ufdyde6q7859slsnzf24x
  - &user_lappy_colin age1ml8kkppftygu2wag57yld98jlrkh4avp54eheq7q0fa2rup843csqjajs6
  - &user_uninsane_colin age1z8fauff34cdecr6sjkre260luzxcca05kpcwvhx988d306tpcejsp63znu
  - &user_moby_colin age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al
  - &host_desko age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6
  - &host_lappy age1w7mectcjku6x3sd8plm8wkn2qfrhv9n6zhzlf329e2r2uycgke8qkf9dyn
  - &host_uninsane age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf
  - &host_moby age1t957gf0z865gya0khgc9x59wy76hzps3sgejjqtwcngn2xl273msxsmpe6
creation_rules:
  - path_regex: secrets/[^/]+\.yaml$
    key_groups:
    - age:
      - *user_desko_colin
      - *user_lappy_colin
      - *user_uninsane_colin
      - *user_moby_colin
      - *host_desko
      - *host_lappy
      - *host_uninsane
      - *host_moby
  - path_regex: secrets/uninsane/[^/]+\.yaml$
    key_groups:
    - age:
      - *user_desko_colin
      - *user_uninsane_colin
      - *host_uninsane
secrets: add an example sops secret 2022-06-06 23:36:22 +00:00			`keys:`
			`- &user_desko_colin age1tnl4jfgacwkargzeqnhzernw29xx8mkv73xh6ufdyde6q7859slsnzf24x`
sops: add moby and lappy pubkeys 2022-06-06 23:54:05 +00:00			`- &user_lappy_colin age1ml8kkppftygu2wag57yld98jlrkh4avp54eheq7q0fa2rup843csqjajs6`
sops: add uninsane.colin to access list 2022-06-06 23:57:35 +00:00			`- &user_uninsane_colin age1z8fauff34cdecr6sjkre260luzxcca05kpcwvhx988d306tpcejsp63znu`
sops: add moby and lappy pubkeys 2022-06-06 23:54:05 +00:00			`- &user_moby_colin age1lt739n2tq7dmpglvntjr9j2r7426md7rat7x9w930gagtx4jyvnqwts2al`
secrets: add an example sops secret 2022-06-06 23:36:22 +00:00			`- &host_desko age1s0v4fm203ap6mckcz3djw8hx30uqu87xfhfdajpmyf8rfrf5xs5swpz6m6`
secrets: add lappy host key to access list 2022-06-07 01:07:28 +00:00			`- &host_lappy age1w7mectcjku6x3sd8plm8wkn2qfrhv9n6zhzlf329e2r2uycgke8qkf9dyn`
re-encrypt keys for uninsane host 2022-06-07 00:53:39 +00:00			`- &host_uninsane age1tzlyex2z6t88tg9h82943e39shxhmqeyr7ywhlwpdjmyqsndv3qq27x0rf`
secrets: add moby host to the access list 2022-06-07 01:05:28 +00:00			`- &host_moby age1t957gf0z865gya0khgc9x59wy76hzps3sgejjqtwcngn2xl273msxsmpe6`
secrets: add an example sops secret 2022-06-06 23:36:22 +00:00			`creation_rules:`
			`- path_regex: secrets/[^/]+\.yaml$`
			`key_groups:`
			`- age:`
			`- *user_desko_colin`
sops: add moby and lappy pubkeys 2022-06-06 23:54:05 +00:00			`- *user_lappy_colin`
sops: add uninsane.colin to access list 2022-06-06 23:57:35 +00:00			`- *user_uninsane_colin`
sops: add moby and lappy pubkeys 2022-06-06 23:54:05 +00:00			`- *user_moby_colin`
secrets: add an example sops secret 2022-06-06 23:36:22 +00:00			`- *host_desko`
secrets: add lappy host key to access list 2022-06-07 01:07:28 +00:00			`- *host_lappy`
sops: add uninsane host key 2022-06-07 00:51:03 +00:00			`- *host_uninsane`
secrets: add moby host to the access list 2022-06-07 01:05:28 +00:00			`- *host_moby`
migrate duplicity PASSPHRASE to sops 2022-06-07 02:06:53 +00:00			`- path_regex: secrets/uninsane/[^/]+\.yaml$`
			`key_groups:`
			`- age:`
			`- *user_desko_colin`
			`- *user_uninsane_colin`
			`- *host_uninsane`