work on remote dev set up on sj-bm-hostkey0

.sops.yaml

@@ -4,6 +4,7 @@
 # for a more complex example.
 
 # use `ssh-keyscan <IP> | ssh-to-age` to get the age key for a remote machine
+# use `for file in $(grep -lr "sops:") secrets; do sops updatekeys -y $file; done` for updating
 keys:
   - &steveej 6F7069FE6B96E894E60EC45C6EEFA706CB17E89B
   - &steveej-t14 age17jxphuql70wjkd84azn62ltx9ky69hyvkac23lm8f2j92lznf9hseqq0vl
@@ -14,8 +15,7 @@ keys:
   - &srv0-dmz0 age13cyvxrd28j68f97q2dwsn62q5dy8tdxtq86ql2dxv2ncwfrf63dsmkj7n3
   # - &router0-dmz0 age1jetxwpmd9hc4crkjtrdle2qxn9dlq7vcmqhfslv0vlxctrk4u3xq8hcvkz
   - &router0-dmz0 age1k7cejd9tqz6a3expd63wkn7kmeawhhrp9vy5vevhjn6eavhdwywqeh7j86
-  - &sj-bm-hostkey0 age19dh6zurkx4xv6dx9lvjw0hychjjqvpcf6aq2s2y8srdk6g82qctqqkmu3v
-
+  - &sj-bm-hostkey0  age1dw43sxtdxptzgyhsxhrj36x5gn7376gqk45t7wtyt3s97v7ux39sdmdd44
 creation_rules:
   - path_regex: ^(.+/|)secrets/[^/]+$
     key_groups: