aboutsummaryrefslogtreecommitdiff
path: root/.sops.yaml
diff options
context:
space:
mode:
authorIsabella Bastaja <isabella@sorre.xyz>2026-05-30 21:24:56 +0200
committerIsabella Bastaja <isabella@sorre.xyz>2026-05-31 20:28:09 +0200
commitc629d5f5688fa58e9fd18b78f5d379863230c5b1 (patch)
treee59cf5d1b4f94e839c6c9da93588491ddd2d2e7a /.sops.yaml
parent644b4843185d7bca9e1ccd0db20b762b0116899b (diff)
set up PKI infra
Diffstat (limited to '.sops.yaml')
-rw-r--r--.sops.yaml10
1 files changed, 4 insertions, 6 deletions
diff --git a/.sops.yaml b/.sops.yaml
index 49cb169..6784734 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,20 +1,18 @@
keys:
- - &admin_miran age1l088h7umwuxp0sw8wk0stfup0empdnldczxvrhueu7n0vxd0c57q9zvwsk
- - &machine_wonderland age1xzqshnlstewfha28sqjp4lf97mm43axyrhga0vkjmt5zx6eydqhsvlsasc
- &machine_sagittarius age1jmpdssn7555g0pht7zwqq2dvrvzxyu65w6cf2su8pp2fz0zvaykq0jgern
- &machine_underworld age1sffhunmeqmeey29lnvuds59mn74jfpctd3wm0t6svca0fztgvd4qnretc6
creation_rules:
- path_regex: secrets/[^/]+\.(yaml|json|env|ini|txt)$
key_groups:
- age:
- - *admin_miran
- - *machine_wonderland
- *machine_sagittarius
- *machine_underworld
- path_regex: secrets/wireguard/[^/]+\.(txt)$
key_groups:
- age:
- - *admin_miran
- - *machine_wonderland
- *machine_sagittarius
- *machine_underworld
+ - path_regex: secrets/ca/[^/]+\.key$
+ key_groups:
+ - age:
+ - *machine_sagittarius