nixos-config/.sops.yaml

keys:
  - &simon 47E7559E037A35652DBBF8AA8D3C82F9F309F8EC
  - &nunotaba 8C5091AEA213FB0642BD46F943EE19743FAC1D5C
  - &sayuri 17FEEBB45E4245330507C960653378F10CA6E00A
  - &vueko 4EA330328CD0D3076E90960194DFA4953D8729DE
  - &fuuko 2372651C56E22972C2D9F3F569C8187C9C43754E
  - &mayushii 23EEDF49AAF1B41DCD1CD10F44A37FA8C15053B3
  - &yuzuru F4B5F6971A1FAEA1216FCE1C6745A652A31186DB
  - &okarin 43B4E35299E0D3D0F85143108E1A6A3507CE6BD8
  - &renge FD4E1FB15DD0F36A77790229826C04C0BE319FA2
  - &nunotaba 3176be14f468c6d43ab2206b4f273abccd49806b
creation_rules:
  - path_regex: machines/nunotaba/secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *nunotaba
  - path_regex: machines/sayuri/secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *sayuri
  - path_regex: machines/vueko/secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *vueko
  - path_regex: machines/fuuko/secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *fuuko
  - path_regex: machines/mayushii/secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *mayushii
  - path_regex: machines/yuzuru/secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *yuzuru
  - path_regex: machines/okarin/secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *okarin
  - path_regex: machines/renge/secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *renge
  - path_regex: machines/nunotaba/secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *nunotaba
  - path_regex: secrets\.yaml$
    key_groups:
    - pgp:
      - *simon
      - *nunotaba
      - *sayuri
      - *vueko
      - *fuuko
      - *mayushii
      - *okarin
      - *renge
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added. 2021-03-01 15:27:18 +01:00			`keys:`
			`- &simon 47E7559E037A35652DBBF8AA8D3C82F9F309F8EC`
			`- &nunotaba 8C5091AEA213FB0642BD46F943EE19743FAC1D5C`
sayuri: Migrate to sops Fixes #38. 2021-04-10 11:58:50 +02:00			`- &sayuri 17FEEBB45E4245330507C960653378F10CA6E00A`
vueko: Migrate to new server 2023-04-27 21:08:38 +02:00			`- &vueko 4EA330328CD0D3076E90960194DFA4953D8729DE`
sayuri: Migrate to sops Fixes #38. 2021-04-10 11:58:50 +02:00			`- &fuuko 2372651C56E22972C2D9F3F569C8187C9C43754E`
mayushii: Init 2021-09-30 07:32:03 +02:00			`- &mayushii 23EEDF49AAF1B41DCD1CD10F44A37FA8C15053B3`
yuzuru: Init 2021-09-08 18:23:21 +02:00			`- &yuzuru F4B5F6971A1FAEA1216FCE1C6745A652A31186DB`
okarin: Init 2022-03-03 09:48:22 +01:00			`- &okarin 43B4E35299E0D3D0F85143108E1A6A3507CE6BD8`
renge: Init 2022-03-23 15:03:08 +01:00			`- &renge FD4E1FB15DD0F36A77790229826C04C0BE319FA2`
nunotaba: Re-init 2022-06-09 17:38:24 +02:00			`- &nunotaba 3176be14f468c6d43ab2206b4f273abccd49806b`
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added. 2021-03-01 15:27:18 +01:00			`creation_rules:`
			`- path_regex: machines/nunotaba/secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *nunotaba`
sayuri: Migrate to sops Fixes #38. 2021-04-10 11:58:50 +02:00			`- path_regex: machines/sayuri/secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *sayuri`
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added. 2021-03-01 15:27:18 +01:00			`- path_regex: machines/vueko/secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *vueko`
			`- path_regex: machines/fuuko/secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *fuuko`
mayushii: Init 2021-09-30 07:32:03 +02:00			`- path_regex: machines/mayushii/secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *mayushii`
yuzuru: Init 2021-09-08 18:23:21 +02:00			`- path_regex: machines/yuzuru/secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *yuzuru`
okarin: Init 2022-03-03 09:48:22 +01:00			`- path_regex: machines/okarin/secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *okarin`
renge: Init 2022-03-23 15:03:08 +01:00			`- path_regex: machines/renge/secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *renge`
nunotaba: Re-init 2022-06-09 17:38:24 +02:00			`- path_regex: machines/nunotaba/secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *nunotaba`
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added. 2021-03-01 15:27:18 +01:00			`- path_regex: secrets\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *simon`
			`- *nunotaba`
sayuri: Migrate to sops Fixes #38. 2021-04-10 11:58:50 +02:00			`- *sayuri`
Use sops for secrets Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added. 2021-03-01 15:27:18 +01:00			`- *vueko`
			`- *fuuko`
mayushii: Init 2021-09-30 07:32:03 +02:00			`- *mayushii`
okarin: Init 2022-03-03 09:48:22 +01:00			`- *okarin`
renge: Init 2022-03-23 15:03:08 +01:00			`- *renge`