nixos-systems/.sops.yaml

keys:
  - &dev_corp age1fnkhk9rv7r8gh84vxnhvndk4fgh20qcj4hvnfhdpumcydl6m6vrse50lrz
  - &dev_macmini age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
  - &dev_pazuzu age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
  - &server_corp age1ck44jqpuz3zlthquvuh7wsemrjrgfzhn462sk7rlfetwxpgy0uqs79xn2h
  - &server_nocix_amd_legacy_sexcore age1z87rm3qrrspv44nsg73ntn9zys5g498lry4t4cy6x9hffapug5cqfprntm
  - &server_test_corp age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
  - &server_sync_nidus age1j90h7hcp4fctr2xwj4zf9cxuelm43wkujvryc9hk6rzzc37rwdmss035w7
creation_rules:
  - path_regex: secrets/.*\.(yaml|json|env|ini)$
    key_groups:
    - age:
      - *dev_corp
      - *dev_macmini
      - *dev_pazuzu
      - *server_corp
      - *server_nocix_amd_legacy_sexcore
      - *server_test_corp
      - *server_sync_nidus
Add basice sops.yaml file for configuring sops. It currently just has the age key for my dev system 2025-07-18 15:39:13 +00:00			`keys:`
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up. 2025-09-09 12:32:58 +00:00			`- &dev_corp age1fnkhk9rv7r8gh84vxnhvndk4fgh20qcj4hvnfhdpumcydl6m6vrse50lrz`
Add mac_mini age key to sops Convenient, but also redundancy avoids a cryptography single-point-of-failure 2025-07-21 19:04:53 +00:00			`- &dev_macmini age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8`
Add corp age key to sops, rename pazuzu's key dev_ prefix is for developer machines 2025-07-18 16:42:50 +00:00			`- &dev_pazuzu age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx`
Update key for new corp server 2025-09-08 23:33:23 +00:00			`- &server_corp age1ck44jqpuz3zlthquvuh7wsemrjrgfzhn462sk7rlfetwxpgy0uqs79xn2h`
Fix sexcore name 2025-10-22 17:21:15 +00:00			`- &server_nocix_amd_legacy_sexcore age1z87rm3qrrspv44nsg73ntn9zys5g498lry4t4cy6x9hffapug5cqfprntm`
Add initial sillytavern secrets, update test-corp key 2025-07-21 16:27:51 +00:00			`- &server_test_corp age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge`
Add new sync host encryption keys to various secrets 2025-08-18 19:58:31 +00:00			`- &server_sync_nidus age1j90h7hcp4fctr2xwj4zf9cxuelm43wkujvryc9hk6rzzc37rwdmss035w7`
Add basice sops.yaml file for configuring sops. It currently just has the age key for my dev system 2025-07-18 15:39:13 +00:00			`creation_rules:`
Clean up sops config, allow subdirectories. 2025-10-08 20:35:56 +00:00			`- path_regex: secrets/.*\.(yaml\|json\|env\|ini)$`
Add basice sops.yaml file for configuring sops. It currently just has the age key for my dev system 2025-07-18 15:39:13 +00:00			`key_groups:`
			`- age:`
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up. 2025-09-09 12:32:58 +00:00			`- *dev_corp`
Add mac_mini age key to sops Convenient, but also redundancy avoids a cryptography single-point-of-failure 2025-07-21 19:04:53 +00:00			`- *dev_macmini`
Add corp age key to sops, rename pazuzu's key dev_ prefix is for developer machines 2025-07-18 16:42:50 +00:00			`- *dev_pazuzu`
			`- *server_corp`
Fix sexcore name 2025-10-22 17:21:15 +00:00			`- *server_nocix_amd_legacy_sexcore`
Add the authentik secrets to the authentik module 2025-07-18 15:44:34 +00:00			`- *server_test_corp`
Add new sync host encryption keys to various secrets 2025-08-18 19:58:31 +00:00			`- *server_sync_nidus`