From 031b8a7f09b59055959284e5d6317400884ad15e Mon Sep 17 00:00:00 2001
From: Devin Finlinson <devin.finlinson@pm.me>
Date: Fri, 4 Sep 2026 03:59:02 -0600
Subject: trying out sops-nix for secrets management documented here:
 https://github.com/Mic92/sops-nix?tab=readme-ov-file

---
 .sops.yaml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 .sops.yaml

(limited to '.sops.yaml')

diff --git a/.sops.yaml b/.sops.yaml
new file mode 100644
index 0000000..201bcc5
--- /dev/null
+++ b/.sops.yaml
@@ -0,0 +1,21 @@
+# https://github.com/Mic92/sops-nix?tab=readme-ov-file#generate-a-key-for-yourself
+keys:
+  - &defin_zenbook age1elwua27zpyazka2l2k3djq7nc0dsclvhd8yknc07u3uqj0hnkfasmmfz6w
+  - &root_zenbook age1yxfe6zpmxckth5dzp0emzfjrrxhjs7h6x33ally8ka4sxawqw9zqkkxpgm
+  - &server_biski age1k38l2drejmpr9dd24zy0dglzny0703yxg8ff29q2yyjlmmpu7g6q60hz4x
+creation_rules:
+  - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
+    key_groups:
+      - age:
+          - *defin_zenbook
+          - *server_biski
+          - *root_zenbook
+        # pgp:
+        #   - *insert_here
+  - path_regex: secrets/biski/[^/]+\.(yaml|json|env|ini)$
+    key_groups:
+      - age:
+          - *defin_zenbook
+          - *server_biski
+      # pgp:
+      #   - *insert_here
-- 
cgit v1.3.1