nixos-systems/.sops.yaml

keys:
  - &dev_corp age1wxlwx75hfxer4trvfzad7cwdn2hhu4we50p32vpy3qvdct7t656q3pp04x
  - &dev_macmini age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
  - &dev_pazuzu age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
  - &dev_poweredge age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2
  - &server_corp age1rqa4qvkk7s26pgj09d269t84vprdrh0jhyl75xq5zyhp9cdssq2qc8hut8
  - &server_nocix_amd_legacy_sexcore age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385
  - &server_test_corp age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
  - &server_sync_nidus_prod age167q6r28ws6wrpjwxnt4ap2fgs6d9cyvrdhzl2wflr2tnsw5xapxq36n2ec
  - &server_sync_nidus_staging age1924evks66k9g6c4zcnn2ghjcxpe0fzw2y9j253xredkwqnw9p5qqjcvjqt
creation_rules:
  - path_regex: secrets/.*\.(yaml|json|env|ini|bin)$
    key_groups:
    - age:
      - *dev_corp
      - *dev_macmini
      - *dev_pazuzu
      - *dev_poweredge
      - *server_corp
      - *server_nocix_amd_legacy_sexcore
      - *server_test_corp
      - *server_sync_nidus_prod
      - *server_sync_nidus_staging
Add basice sops.yaml file for configuring sops. It currently just has the age key for my dev system 2025-07-18 15:39:13 +00:00			`keys:`
Add new dev key for corp 2026-01-13 14:56:38 +00:00			`- &dev_corp age1wxlwx75hfxer4trvfzad7cwdn2hhu4we50p32vpy3qvdct7t656q3pp04x`
Add mac_mini age key to sops Convenient, but also redundancy avoids a cryptography single-point-of-failure 2025-07-21 19:04:53 +00:00			`- &dev_macmini age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8`
Add corp age key to sops, rename pazuzu's key dev_ prefix is for developer machines 2025-07-18 16:42:50 +00:00			`- &dev_pazuzu age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx`
Add dev_poweredge key For building nix binary cache 2025-12-15 18:47:41 +00:00			`- &dev_poweredge age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2`
Update host key for corp server 2026-01-13 04:48:16 +00:00			`- &server_corp age1rqa4qvkk7s26pgj09d269t84vprdrh0jhyl75xq5zyhp9cdssq2qc8hut8`
Update key for nocix-amd-legacy-sexcore after rebuild 2026-01-04 21:06:58 +00:00			`- &server_nocix_amd_legacy_sexcore age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385`
Add initial sillytavern secrets, update test-corp key 2025-07-21 16:27:51 +00:00			`- &server_test_corp age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge`
Add new staging server key for sops 2026-02-18 05:06:57 +00:00			`- &server_sync_nidus_prod age167q6r28ws6wrpjwxnt4ap2fgs6d9cyvrdhzl2wflr2tnsw5xapxq36n2ec`
Update staging server key after rebuild 2026-02-18 15:24:52 +00:00			`- &server_sync_nidus_staging age1924evks66k9g6c4zcnn2ghjcxpe0fzw2y9j253xredkwqnw9p5qqjcvjqt`
Add basice sops.yaml file for configuring sops. It currently just has the age key for my dev system 2025-07-18 15:39:13 +00:00			`creation_rules:`
Support .bin files in secrets I'm not using it now, but I almost did for pgAdmin 2026-05-08 18:13:09 +00:00			`- path_regex: secrets/.*\.(yaml\|json\|env\|ini\|bin)$`
Add basice sops.yaml file for configuring sops. It currently just has the age key for my dev system 2025-07-18 15:39:13 +00:00			`key_groups:`
			`- age:`
Add corp dev key This makes it so I can modify secrets files directly on the server I'm bringing up. 2025-09-09 12:32:58 +00:00			`- *dev_corp`
Add mac_mini age key to sops Convenient, but also redundancy avoids a cryptography single-point-of-failure 2025-07-21 19:04:53 +00:00			`- *dev_macmini`
Add corp age key to sops, rename pazuzu's key dev_ prefix is for developer machines 2025-07-18 16:42:50 +00:00			`- *dev_pazuzu`
Add dev_poweredge key For building nix binary cache 2025-12-15 18:47:41 +00:00			`- *dev_poweredge`
Add corp age key to sops, rename pazuzu's key dev_ prefix is for developer machines 2025-07-18 16:42:50 +00:00			`- *server_corp`
Fix sexcore name 2025-10-22 17:21:15 +00:00			`- *server_nocix_amd_legacy_sexcore`
Add the authentik secrets to the authentik module 2025-07-18 15:44:34 +00:00			`- *server_test_corp`
Add new staging server key for sops 2026-02-18 05:06:57 +00:00			`- *server_sync_nidus_prod`
			`- *server_sync_nidus_staging`