From fa7f107565e8b71a76951b668b47581376ee8c35 Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Thu, 4 Jun 2026 20:08:39 +0200
Subject: add vaultwarden SAN to sagittarius cert

---
 .sops.yaml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to '.sops.yaml')

diff --git a/.sops.yaml b/.sops.yaml
index 1594b31..62d47e9 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -12,7 +12,11 @@ creation_rules:
       - age:
           - *machine_sagittarius
           - *machine_underworld
-  - path_regex: secrets/ca/[^/]+\.(key|crt)$
+  - path_regex: secrets/ca/rootCA.key$
+    key_groups:
+      - age:
+          - *machine_sagittarius
+  - path_regex: secrets/ca/certs/[^/]+\.(key|crt)$
     key_groups:
       - age:
           - *machine_sagittarius
-- 
cgit v1.3.1