feat: winters <> summers parity

pkgs/flake/gen-sops-guest/default.nix

@@ -0,0 +1,30 @@
+{ name, writeShellApplication, ... }:
+
+writeShellApplication {
+  inherit name;
+  text = ''
+
+    if [ "$#" -lt 3 ]; then
+      echo "Usage: $0 <host> <arch_path> <service1> [service2 ...]" >&2
+      echo "Example: $0 hintbooth hosts/nixos/x86_64-linux adguardhome nginx" >&2
+      exit 1
+    fi
+
+    HOST="$1"
+    ARCH_PATH="$2"
+    shift 2
+
+    for service in "$@"; do
+      cat <<EOF
+      - path_regex: ''${ARCH_PATH}/''${HOST}/secrets/''${service}/[^/]+\.(yaml|json|env|ini|enc)\$
+        key_groups:
+        - pgp:
+          - *swarsel
+          age:
+          - *''${HOST}
+          - *''${HOST}-''${service}
+
+    EOF
+    done
+  '';
+}