Synchronize admin keys in .sops.yaml with ansible-infra and make use of SOPS merge feature for organization.
66 lines
2.5 KiB
YAML
66 lines
2.5 KiB
YAML
keys:
|
|
admins: &admin_keys
|
|
pgp: &admin_pgp_keys
|
|
- &admin_pgp_djerun EF643F59E008414882232C78FFA8331EEB7D6B70
|
|
- &admin_pgp_stb 21C9579E6503CA815A68ABD8541F9408A813C8B7
|
|
- &admin_pgp_fi 9633412309CCB83BFA39BA5F2FEF746201D7FCFE
|
|
- &admin_pgp_june 057870A2C72CD82566A3EC983695F4FCBCAE4912
|
|
- &admin_pgp_haegar F38C9D4228FC6F674E322D9C3326D914EB9B8F55
|
|
# - &admin_pgp_dario 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD # expired
|
|
- &admin_pgp_echtnurich 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
|
|
- &admin_pgp_c6ristian B71138A6A8964A3C3B8899857B4F70C356765BAB
|
|
- &admin_pgp_lilly D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
|
|
- &admin_pgp_langoor 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
|
|
- &admin_pgp_bitwhisker 41FFAF3D519CF5C039FBD8414BCC213729AF0E49
|
|
age: &admin_age_keys
|
|
- &admin_age_jtbx ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIBQgnQAq6FUSDK8bxtYPjx3oRCAKG+xy9J3Gas2ztJk
|
|
- &admin_age_lilly age19h7xtfmt3py3ydgl8d8fgh8uakxqxjr74flrxev3pgmvvx94kvtq5d932d
|
|
hosts:
|
|
- &host_age_git age18zaq9xg9nhqyl8g7mvrqhsx4qstay5l9cekq2g80vx4920pswdfqpeafd7
|
|
- &host_age_forgejo_actions_runner age10xz2l7ghul7023awcydf4q3wurmszy2tafnadlarj0tvm7kl033sjw5f8t
|
|
- &host_age_matrix age1f7ams0n2zy994pzt0u30h8tex6xdcernj59t4d70z4kjsyzrr3wsy87xzk
|
|
- &host_age_public_web_static age19s7r8sf7j6zk24x9vumawgxpd2q8epyv7p9qsjntw7v9s3v045mqhmsfp0
|
|
- &host_age_woodpecker age1klxtcr23hers0lh4f5zdd53tyrtg0jud35rhydstyjq9fjymf9hsn2a8ch
|
|
- &host_age_penpot age10ku5rphtsf2lcxg78za7f2dad5cx5x9urgkce0d7tyqwq2enva9sqf7g8r
|
|
creation_rules:
|
|
- path_regex: config/hosts/git/.*
|
|
key_groups:
|
|
- age:
|
|
- *host_age_git
|
|
merge:
|
|
- *admin_keys
|
|
- path_regex: config/hosts/forgejo-actions-runner/.*
|
|
key_groups:
|
|
- age:
|
|
- *host_age_forgejo_actions_runner
|
|
merge:
|
|
- *admin_keys
|
|
- path_regex: config/hosts/matrix/.*
|
|
key_groups:
|
|
- age:
|
|
- *host_age_matrix
|
|
merge:
|
|
- *admin_keys
|
|
- path_regex: config/hosts/public-web-static/.*
|
|
key_groups:
|
|
- age:
|
|
- *host_age_public_web_static
|
|
merge:
|
|
- *admin_keys
|
|
- path_regex: config/hosts/woodpecker/.*
|
|
key_groups:
|
|
- age:
|
|
- *host_age_woodpecker
|
|
merge:
|
|
- *admin_keys
|
|
- path_regex: config/hosts/penpot/.*
|
|
key_groups:
|
|
- age:
|
|
- *host_age_penpot
|
|
merge:
|
|
- *admin_keys
|
|
- key_groups:
|
|
- *admin_keys
|
|
stores:
|
|
yaml:
|
|
indent: 2
|