nixos-systems/.sops.yaml

keys:
  - &dev_corp age1fnkhk9rv7r8gh84vxnhvndk4fgh20qcj4hvnfhdpumcydl6m6vrse50lrz
  - &dev_macmini age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
  - &dev_pazuzu age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
  - &dev_poweredge age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2
  - &server_corp age1rqa4qvkk7s26pgj09d269t84vprdrh0jhyl75xq5zyhp9cdssq2qc8hut8
  - &server_nocix_amd_legacy_sexcore age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385
  - &server_test_corp age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
  - &server_sync_nidus age167q6r28ws6wrpjwxnt4ap2fgs6d9cyvrdhzl2wflr2tnsw5xapxq36n2ec
creation_rules:
  - path_regex: secrets/.*\.(yaml|json|env|ini)$
    key_groups:
    - age:
      - *dev_corp
      - *dev_macmini
      - *dev_pazuzu
      - *dev_poweredge
      - *server_corp
      - *server_nocix_amd_legacy_sexcore
      - *server_test_corp
      - *server_sync_nidus
Add basice sops.yaml file for configuring sops. It currently just has the age key for my dev system 2025-07-18 15:39:13 +00:00			`keys:`
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up. 2025-09-09 12:32:58 +00:00			`- &dev_corp age1fnkhk9rv7r8gh84vxnhvndk4fgh20qcj4hvnfhdpumcydl6m6vrse50lrz`
Add mac_mini age key to sops Convenient, but also redundancy avoids a cryptography single-point-of-failure 2025-07-21 19:04:53 +00:00			`- &dev_macmini age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8`
Add corp age key to sops, rename pazuzu's key dev_ prefix is for developer machines 2025-07-18 16:42:50 +00:00			`- &dev_pazuzu age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx`
Add dev_poweredge key For building nix binary cache 2025-12-15 18:47:41 +00:00			`- &dev_poweredge age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2`
Update host key for corp server 2026-01-13 04:48:16 +00:00			`- &server_corp age1rqa4qvkk7s26pgj09d269t84vprdrh0jhyl75xq5zyhp9cdssq2qc8hut8`
Update key for nocix-amd-legacy-sexcore after rebuild 2026-01-04 21:06:58 +00:00			`- &server_nocix_amd_legacy_sexcore age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385`
Add initial sillytavern secrets, update test-corp key 2025-07-21 16:27:51 +00:00			`- &server_test_corp age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge`
Re-wipe nocix-amd-legacy-sexcore again, update secrets (again) 2026-01-05 03:31:47 +00:00			`- &server_sync_nidus age167q6r28ws6wrpjwxnt4ap2fgs6d9cyvrdhzl2wflr2tnsw5xapxq36n2ec`
Add basice sops.yaml file for configuring sops. It currently just has the age key for my dev system 2025-07-18 15:39:13 +00:00			`creation_rules:`
Clean up sops config, allow subdirectories. 2025-10-08 20:35:56 +00:00			`- path_regex: secrets/.*\.(yaml\|json\|env\|ini)$`
Add basice sops.yaml file for configuring sops. It currently just has the age key for my dev system 2025-07-18 15:39:13 +00:00			`key_groups:`
			`- age:`
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up. 2025-09-09 12:32:58 +00:00			`- *dev_corp`
Add mac_mini age key to sops Convenient, but also redundancy avoids a cryptography single-point-of-failure 2025-07-21 19:04:53 +00:00			`- *dev_macmini`
Add corp age key to sops, rename pazuzu's key dev_ prefix is for developer machines 2025-07-18 16:42:50 +00:00			`- *dev_pazuzu`
Add dev_poweredge key For building nix binary cache 2025-12-15 18:47:41 +00:00			`- *dev_poweredge`
Add corp age key to sops, rename pazuzu's key dev_ prefix is for developer machines 2025-07-18 16:42:50 +00:00			`- *server_corp`
Fix sexcore name 2025-10-22 17:21:15 +00:00			`- *server_nocix_amd_legacy_sexcore`
Add the authentik secrets to the authentik module 2025-07-18 15:44:34 +00:00			`- *server_test_corp`
Add new sync host encryption keys to various secrets 2025-08-18 19:58:31 +00:00			`- *server_sync_nidus`