nixos-config/.sops.yaml

keys:
  - &simon 47E7559E037A35652DBBF8AA8D3C82F9F309F8EC
  - &nunotaba 8C5091AEA213FB0642BD46F943EE19743FAC1D5C
  - &sayuri 17FEEBB45E4245330507C960653378F10CA6E00A
  - &vueko BB046D773F54739757553A053CB9B8EFD7FED749
  - &fuuko 2372651C56E22972C2D9F3F569C8187C9C43754E
creation_rules:
  - path_regex: machines/nunotaba/secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *nunotaba
  - path_regex: machines/sayuri/secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *sayuri
  - path_regex: machines/vueko/secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *vueko
  - path_regex: machines/fuuko/secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *fuuko
  - path_regex: secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *nunotaba
      - *sayuri
      - *vueko
      - *fuuko
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added. 2021-03-01 15:27:18 +01:00			`keys:`
			`- &simon 47E7559E037A35652DBBF8AA8D3C82F9F309F8EC`
			`- &nunotaba 8C5091AEA213FB0642BD46F943EE19743FAC1D5C`
sayuri: Migrate to sops Fixes #38. 2021-04-10 11:58:50 +02:00			`- &sayuri 17FEEBB45E4245330507C960653378F10CA6E00A`
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added. 2021-03-01 15:27:18 +01:00			`- &vueko BB046D773F54739757553A053CB9B8EFD7FED749`
sayuri: Migrate to sops Fixes #38. 2021-04-10 11:58:50 +02:00			`- &fuuko 2372651C56E22972C2D9F3F569C8187C9C43754E`
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added. 2021-03-01 15:27:18 +01:00			`creation_rules:`
			`- path_regex: machines/nunotaba/secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *nunotaba`
sayuri: Migrate to sops Fixes #38. 2021-04-10 11:58:50 +02:00			`- path_regex: machines/sayuri/secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *sayuri`
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added. 2021-03-01 15:27:18 +01:00			`- path_regex: machines/vueko/secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *vueko`
			`- path_regex: machines/fuuko/secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *fuuko`
			`- path_regex: secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *nunotaba`
sayuri: Migrate to sops Fixes #38. 2021-04-10 11:58:50 +02:00			`- *sayuri`
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added. 2021-03-01 15:27:18 +01:00			`- *vueko`
			`- *fuuko`