diff options
| author | Devin Finlinson <devin.finlinson@pm.me> | 2026-09-04 03:59:02 -0600 |
|---|---|---|
| committer | Devin Finlinson <devin.finlinson@pm.me> | 2026-09-04 03:59:02 -0600 |
| commit | 031b8a7f09b59055959284e5d6317400884ad15e (patch) | |
| tree | 4111341ea5c52639d61808f1beb842a19218943b /.sops.yaml | |
| parent | 32d4405ee1e75ae1e2b84e191981cedbdfa9a683 (diff) | |
trying out sops-nix for secrets management
documented here: https://github.com/Mic92/sops-nix?tab=readme-ov-file
Diffstat (limited to '.sops.yaml')
| -rw-r--r-- | .sops.yaml | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/.sops.yaml b/.sops.yaml new file mode 100644 index 0000000..201bcc5 --- /dev/null +++ b/.sops.yaml @@ -0,0 +1,21 @@ +# https://github.com/Mic92/sops-nix?tab=readme-ov-file#generate-a-key-for-yourself +keys: + - &defin_zenbook age1elwua27zpyazka2l2k3djq7nc0dsclvhd8yknc07u3uqj0hnkfasmmfz6w + - &root_zenbook age1yxfe6zpmxckth5dzp0emzfjrrxhjs7h6x33ally8ka4sxawqw9zqkkxpgm + - &server_biski age1k38l2drejmpr9dd24zy0dglzny0703yxg8ff29q2yyjlmmpu7g6q60hz4x +creation_rules: + - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$ + key_groups: + - age: + - *defin_zenbook + - *server_biski + - *root_zenbook + # pgp: + # - *insert_here + - path_regex: secrets/biski/[^/]+\.(yaml|json|env|ini)$ + key_groups: + - age: + - *defin_zenbook + - *server_biski + # pgp: + # - *insert_here |