Gleipnir/nixos-systems
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add mac_mini age key to sops

Browse source 
Convenient, but also redundancy avoids a cryptography
single-point-of-failure
This commit is contained in:
Eli Ribble 2025-07-21 19:04:53 +00:00
parent 2e69a67b2a
commit 086e13e748
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.sops.yaml
View file

@ -1,4 +1,5 @@
keys:
- &dev_macmini age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
- &dev_pazuzu age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
- &server_corp age1kgwk20cc6t68kqj5nhem6swvx6k4e7zjx2xdwy382360h8tdyqrq0nn3gf
- &server_test_corp age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
@ -6,15 +7,18 @@ creation_rules:
- path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *dev_macmini
- *dev_pazuzu
- *server_corp
- *server_test_corp
- path_regex: host/corp/secrets/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *dev_macmini
- *dev_pazuzu
- *server_corp
- path_regex: host/pazuzu/secrets/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *dev_macmini
- *dev_pazuzu