fix creation rules for eh22-wiki, sunders and wiki hosts

Also update the keys of the secret files accordingly. This should then fix ansible-pull on these hosts.
2025-10-15 10:45:54 +02:00 · 2025-10-15 10:45:54 +02:00 · f646cc0bf2
commit f646cc0bf2
parent dea66771e0
4 changed files with 462 additions and 432 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -86,6 +86,24 @@ creation_rules:
    key_groups:
      - pgp:
          *admin_gpg_keys
+  - path_regex: inventories/chaosknoten/host_vars/eh22-wiki.*
+    key_groups:
+      - pgp:
+          *admin_gpg_keys
+        age:
+          - *host_eh22_wiki_ansible_pull_age_key
+  - path_regex: inventories/chaosknoten/host_vars/sunders.*
+    key_groups:
+      - pgp:
+          *admin_gpg_keys
+        age:
+          - *host_sunders_ansible_pull_age_key
+  - path_regex: inventories/chaosknoten/host_vars/wiki.*
+    key_groups:
+      - pgp:
+          *admin_gpg_keys
+        age:
+          - *host_wiki_ansible_pull_age_key
  - path_regex: inventories/z9/host_vars/dooris.*
    key_groups:
      - pgp:
@ -94,24 +112,6 @@ creation_rules:
    key_groups:
      - pgp:
          *admin_gpg_keys
-  - path_regex: inventories/z9/host_vars/eh22-wiki.*
-    key_groups:
-      - pgp:
-          *admin_gpg_keys
-        age:
-          - *host_eh22_wiki_ansible_pull_age_key
-  - path_regex: inventories/z9/host_vars/sunders.*
-    key_groups:
-      - pgp:
-          *admin_gpg_keys
-        age:
-          - *host_sunders_ansible_pull_age_key
-  - path_regex: inventories/z9/host_vars/wiki.*
-    key_groups:
-      - pgp:
-          *admin_gpg_keys
-        age:
-          - *host_wiki_ansible_pull_age_key
  # general
  - key_groups:
      - pgp: