.sops.yaml

keys:
  - &admin_justin age1en3a406mje3x7nqpmrth4x9n23fz6mwztmyhmtn3fqyrkl25avgqfwghcd
  - &server_eunomia age1en3a406mje3x7nqpmrth4x9n23fz6mwztmyhmtn3fqyrkl25avgqfwghcd
  - &server_bunky age1p9guzg2fw70rtsjfwt69ux0pfjcfgzykjy7u4p7wsmg5lf4pgvcqh5pxnv
  - &server_ceylon age19ryr2zcmnzg6fvnlk7q7zcc2gd3zxmw2u4twq0n9h4jgxjgnhe0qwj87uy
  - &server_pyxis age12trd5jrghe4g39phdpdapn6dlk9kqakzqgk39kufwwpknr77ze7slsy3km
  - &server_huginn age1l5pkxrftt3e25kny6l8xllw53uh6almh9usv8x9h67g82k7q63ss8daq5e
  - &server_alex age1z94tzmzngntrkn32jm4283m2fwhhw73q8gghawld4vya7a6jtafsyznmnk
  - &server_factorio age1cvzm79nyup6klnwc8dhwhhssk34sk48ke6kqn5nwm6pfskkp5g2qla9lkr
creation_rules:
  - path_regex: secrets/bunky/[^/]+\.yaml$
    key_groups:
    - age:
      - *admin_justin
      - *server_bunky
  - path_regex: secrets/tailscale/[^/]+\.yaml$
    key_groups:
    - age:
      - *admin_justin
      - *server_bunky
      - *server_eunomia
      - *server_ceylon
      - *server_pyxis
      - *server_huginn
      - *server_alex
      - *server_factorio

  - path_regex: secrets/vault/[^/]+\.yaml$
    key_groups:
    - age:
      - *admin_justin

  - path_regex: secrets/porkbun/creds.yaml$
    key_groups:
    - age:
      - *admin_justin
      - *server_huginn

  - path_regex: secrets/nomad.yaml$
    key_groups:
    - age:
      - *admin_justin
      - *server_bunky
      - *server_ceylon
      - *server_pyxis

  - path_regex: secrets/minio.yaml$
    key_groups:
    - age:
      - *admin_justin
      - *server_alex