nix-infra/.sops.yaml
June c11128ea4d
synchronize admin keys with ansible-infra and use SOPS merge
Synchronize admin keys in .sops.yaml with ansible-infra and make use of
SOPS merge feature for organization.
2026-09-24 20:45:22 +02:00

66 lines
2.5 KiB
YAML

keys:
admins: &admin_keys
pgp: &admin_pgp_keys
- &admin_pgp_djerun EF643F59E008414882232C78FFA8331EEB7D6B70
- &admin_pgp_stb 21C9579E6503CA815A68ABD8541F9408A813C8B7
- &admin_pgp_fi 9633412309CCB83BFA39BA5F2FEF746201D7FCFE
- &admin_pgp_june 057870A2C72CD82566A3EC983695F4FCBCAE4912
- &admin_pgp_haegar F38C9D4228FC6F674E322D9C3326D914EB9B8F55
# - &admin_pgp_dario 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD # expired
- &admin_pgp_echtnurich 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
- &admin_pgp_c6ristian B71138A6A8964A3C3B8899857B4F70C356765BAB
- &admin_pgp_lilly D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
- &admin_pgp_langoor 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
- &admin_pgp_bitwhisker 41FFAF3D519CF5C039FBD8414BCC213729AF0E49
age: &admin_age_keys
- &admin_age_jtbx ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIBQgnQAq6FUSDK8bxtYPjx3oRCAKG+xy9J3Gas2ztJk
- &admin_age_lilly age19h7xtfmt3py3ydgl8d8fgh8uakxqxjr74flrxev3pgmvvx94kvtq5d932d
hosts:
- &host_age_git age18zaq9xg9nhqyl8g7mvrqhsx4qstay5l9cekq2g80vx4920pswdfqpeafd7
- &host_age_forgejo_actions_runner age10xz2l7ghul7023awcydf4q3wurmszy2tafnadlarj0tvm7kl033sjw5f8t
- &host_age_matrix age1f7ams0n2zy994pzt0u30h8tex6xdcernj59t4d70z4kjsyzrr3wsy87xzk
- &host_age_public_web_static age19s7r8sf7j6zk24x9vumawgxpd2q8epyv7p9qsjntw7v9s3v045mqhmsfp0
- &host_age_woodpecker age1klxtcr23hers0lh4f5zdd53tyrtg0jud35rhydstyjq9fjymf9hsn2a8ch
- &host_age_penpot age10ku5rphtsf2lcxg78za7f2dad5cx5x9urgkce0d7tyqwq2enva9sqf7g8r
creation_rules:
- path_regex: config/hosts/git/.*
key_groups:
- age:
- *host_age_git
merge:
- *admin_keys
- path_regex: config/hosts/forgejo-actions-runner/.*
key_groups:
- age:
- *host_age_forgejo_actions_runner
merge:
- *admin_keys
- path_regex: config/hosts/matrix/.*
key_groups:
- age:
- *host_age_matrix
merge:
- *admin_keys
- path_regex: config/hosts/public-web-static/.*
key_groups:
- age:
- *host_age_public_web_static
merge:
- *admin_keys
- path_regex: config/hosts/woodpecker/.*
key_groups:
- age:
- *host_age_woodpecker
merge:
- *admin_keys
- path_regex: config/hosts/penpot/.*
key_groups:
- age:
- *host_age_penpot
merge:
- *admin_keys
- key_groups:
- *admin_keys
stores:
yaml:
indent: 2