swarsel/.dotfiles
1
0
Fork 0
mirror of https://github.com/Swarsel/.dotfiles.git synced 2025-12-06 00:57:22 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore: clean up sops

Browse source
This commit is contained in:
Swarsel 2024-12-17 17:26:29 +01:00
parent 67884944a3
commit 21c5e7f5cc
Signed by: swarsel
GPG key ID: 26A54C31F2A4FD84
9 changed files with 211 additions and 323 deletions
Download patch file Download diff file Expand all files Collapse all files

43
.sops.yaml
View file

@ -4,44 +4,47 @@
# for a more complex example.
keys:
- &users
- &admin_swarsel 4BE7925262289B476DBBC17B76FD3810215AE097
- &swarsel 4BE7925262289B476DBBC17B76FD3810215AE097
- &hosts
- &server_winters age1h72072slm2pthn9m2qwjsyy2dsazc6hz97kpzh4gksvv0r2jqecqul8w63
- &server_surface age1zlnxraee6tddr07xn59mx5rdexw8qxryd53eqlsajasfhfy78fkq705dfg
- &server_nbl age16lnmuuxfuxxtty3atnhut8wseppwnhp7rdhmxqd5tdvs9qnjffjq42sqyy
- &server_sync age1glge4e97vgqzh332mqs5990vteezu2m8k4wq3z35jk0q8czw3gks2d7a3h
- &winters age1h72072slm2pthn9m2qwjsyy2dsazc6hz97kpzh4gksvv0r2jqecqul8w63
- &toto age1kncgcer2z26zlnkzkujfcq0qn7q0gx7f4h6h6653h7s82j03vpysar9svx
- &surface age1zlnxraee6tddr07xn59mx5rdexw8qxryd53eqlsajasfhfy78fkq705dfg
- &nbl age16lnmuuxfuxxtty3atnhut8wseppwnhp7rdhmxqd5tdvs9qnjffjq42sqyy
- &sync age1glge4e97vgqzh332mqs5990vteezu2m8k4wq3z35jk0q8czw3gks2d7a3h
creation_rules:
- path_regex: secrets/general/[^/]+\.(yaml|json|env|ini)$
key_groups:
- pgp:
- *admin_swarsel
- *swarsel
age:
- *server_winters
- *server_surface
- *server_nbl
- *winters
- *toto
- *surface
- *nbl
- path_regex: secrets/certs/[^/]+\.(yaml|json|env|ini)$
key_groups:
- pgp:
- *admin_swarsel
- *swarsel
age:
- *server_winters
- *server_surface
- *server_winters
- path_regex: secrets/server/winters/[^/]+\.(yaml|json|env|ini)$
- *winters
- *toto
- *surface
- *winters
- path_regex: secrets/winters/[^/]+\.(yaml|json|env|ini)$
key_groups:
- pgp:
- *admin_swarsel
- *swarsel
age:
- *server_winters
- *winters
- path_regex: secrets/work/[^/]+\.(yaml|json|env|ini)$
key_groups:
- pgp:
- *admin_swarsel
- *swarsel
age:
- *server_nbl
- *nbl
- path_regex: secrets/sync/[^/]+\.(yaml|json|env|ini)$
key_groups:
- pgp:
- *admin_swarsel
- *swarsel
age:
- *server_sync
- *sync