2023-12-28 10:38:38 +00:00
|
|
|
# This example uses YAML anchors which allows reuse of multiple keys
|
2023-07-05 15:55:04 +02:00
|
|
|
# without having to repeat yourself.
|
|
|
|
|
# Also see https://github.com/Mic92/dotfiles/blob/master/nixos/.sops.yaml
|
|
|
|
|
# for a more complex example.
|
|
|
|
|
|
2023-11-23 17:14:15 +01:00
|
|
|
# use `ssh-keyscan <IP> | ssh-to-age` to get the age key for a remote machine
|
2023-11-24 11:34:17 +01:00
|
|
|
# use `for file in $(grep -lr "sops:") secrets; do sops updatekeys -y $file; done` for updating
|
2023-07-05 15:55:04 +02:00
|
|
|
keys:
|
|
|
|
|
- &steveej 6F7069FE6B96E894E60EC45C6EEFA706CB17E89B
|
|
|
|
|
- &steveej-t14 age17jxphuql70wjkd84azn62ltx9ky69hyvkac23lm8f2j92lznf9hseqq0vl
|
2024-01-21 21:08:01 +01:00
|
|
|
- &steveej-x13s-rmvbl age1hkta9w0yawwwwchapemkygzxkrv7vx759vrafgrjhm63spckwstque8x97
|
2023-07-09 20:15:06 +02:00
|
|
|
- &elias-e525 age1pmznn2tjpelpmxjxqef48rse5ujggf9kcr8x5vewuadqcw03aavqwy54zm
|
|
|
|
|
- &justyna-p300 age1ye4fa0v37shz8q4e5uf9cp2avygcp9jtetmnj2sv9y9mqc7gjyksq2cjy8
|
2023-07-05 15:55:04 +02:00
|
|
|
|
2023-07-06 22:42:24 +02:00
|
|
|
- &sj-vps-htz0 age18dmqd7r7fanrfmdxsvwgv9psvhs3hw5ydpvw0na0dv3dlrg4rs3q2wpvgv
|
2024-01-18 21:06:45 +00:00
|
|
|
- &sj-srv1 age18dmqd7r7fanrfmdxsvwgv9psvhs3hw5ydpvw0na0dv3dlrg4rs3q2wpvgv
|
2023-07-06 22:42:24 +02:00
|
|
|
- &srv0-dmz0 age13cyvxrd28j68f97q2dwsn62q5dy8tdxtq86ql2dxv2ncwfrf63dsmkj7n3
|
2023-08-10 21:45:49 +02:00
|
|
|
# - &router0-dmz0 age1jetxwpmd9hc4crkjtrdle2qxn9dlq7vcmqhfslv0vlxctrk4u3xq8hcvkz
|
|
|
|
|
- &router0-dmz0 age1k7cejd9tqz6a3expd63wkn7kmeawhhrp9vy5vevhjn6eavhdwywqeh7j86
|
2023-11-24 11:34:17 +01:00
|
|
|
- &sj-bm-hostkey0 age1dw43sxtdxptzgyhsxhrj36x5gn7376gqk45t7wtyt3s97v7ux39sdmdd44
|
2023-07-05 15:55:04 +02:00
|
|
|
creation_rules:
|
|
|
|
|
- path_regex: ^(.+/|)secrets/[^/]+$
|
|
|
|
|
key_groups:
|
|
|
|
|
- pgp:
|
|
|
|
|
- *steveej
|
|
|
|
|
age:
|
|
|
|
|
- *steveej-t14
|
2024-01-21 21:08:01 +01:00
|
|
|
- *steveej-x13s-rmvbl
|
2023-07-09 20:15:06 +02:00
|
|
|
- *elias-e525
|
|
|
|
|
- *justyna-p300
|
2023-08-10 21:45:49 +02:00
|
|
|
|
|
|
|
|
- *srv0-dmz0
|
|
|
|
|
- *router0-dmz0
|
|
|
|
|
|
|
|
|
|
- *sj-vps-htz0
|
2024-01-18 21:06:45 +00:00
|
|
|
- *sj-srv1
|
2023-11-23 17:14:15 +01:00
|
|
|
- *sj-bm-hostkey0
|
2023-07-05 15:55:04 +02:00
|
|
|
- path_regex: ^secrets/steveej-t14/.+$
|
|
|
|
|
key_groups:
|
|
|
|
|
- pgp:
|
|
|
|
|
- *steveej
|
|
|
|
|
age:
|
|
|
|
|
- *steveej-t14
|
|
|
|
|
- path_regex: ^secrets/servers/.+$
|
|
|
|
|
key_groups:
|
|
|
|
|
- pgp:
|
|
|
|
|
- *steveej
|
|
|
|
|
age:
|
|
|
|
|
- *sj-vps-htz0
|
2024-01-18 21:06:45 +00:00
|
|
|
- *sj-srv1
|
2023-07-05 15:55:04 +02:00
|
|
|
- path_regex: ^nix/os/containers/.+_secrets.+$
|
|
|
|
|
key_groups:
|
|
|
|
|
- pgp:
|
|
|
|
|
- *steveej
|
|
|
|
|
age:
|
2023-07-15 21:20:45 +02:00
|
|
|
- *sj-vps-htz0
|
2024-01-18 21:06:45 +00:00
|
|
|
- *sj-srv1
|
2023-07-15 21:20:45 +02:00
|
|
|
- path_regex: ^secrets/holochain-infra/.+$
|
|
|
|
|
key_groups:
|
|
|
|
|
- pgp:
|
|
|
|
|
- *steveej
|
|
|
|
|
age:
|
2023-08-10 21:45:49 +02:00
|
|
|
- *srv0-dmz0
|
|
|
|
|
- path_regex: ^secrets/router0-dmz0/.+$
|
|
|
|
|
key_groups:
|
|
|
|
|
- pgp:
|
|
|
|
|
- *steveej
|
|
|
|
|
age:
|
2023-08-11 18:49:31 +02:00
|
|
|
- *router0-dmz0
|
|
|
|
|
- path_regex: ^secrets/sj-vps-htz0/.+$
|
|
|
|
|
key_groups:
|
|
|
|
|
- pgp:
|
|
|
|
|
- *steveej
|
|
|
|
|
age:
|
2023-11-23 17:14:15 +01:00
|
|
|
- *sj-vps-htz0
|
2024-01-18 21:06:45 +00:00
|
|
|
- path_regex: ^secrets/sj-srv1/.+$
|
|
|
|
|
key_groups:
|
|
|
|
|
- pgp:
|
|
|
|
|
- *steveej
|
|
|
|
|
age:
|
|
|
|
|
- *sj-srv1
|
2023-11-23 17:14:15 +01:00
|
|
|
- path_regex: ^secrets/sj-bm-hostkey0/.+$
|
|
|
|
|
key_groups:
|
|
|
|
|
- pgp:
|
|
|
|
|
- *steveej
|
|
|
|
|
age:
|
2023-12-28 10:38:38 +00:00
|
|
|
- *sj-bm-hostkey0
|
2024-01-21 21:08:01 +01:00
|
|
|
- path_regex: ^secrets/steveej-x13s-rmvbl/.+$
|
|
|
|
|
key_groups:
|
|
|
|
|
- pgp:
|
|
|
|
|
- *steveej
|
|
|
|
|
age:
|
|
|
|
|
- *steveej-x13s-rmvbl
|
