ahuston-0/nix-dotfiles
1
0
Fork 0
Code Issues Pull Requests 3 Actions Packages Projects Releases Wiki Activity

updated .sops.yaml

Browse Source
This commit is contained in:
Richie Cahill 2023-12-29 13:53:36 -05:00
parent 60442534f2
commit 097cfa3f7d
1 changed files with 25 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
.sops.yaml
View File

@ -2,19 +2,31 @@ keys:
# The PGP keys in keys/ # The PGP keys in keys/
- &admin_alice F63832C3080D6E1AC77EECF80B4245FFE305BC82 - &admin_alice F63832C3080D6E1AC77EECF80B4245FFE305BC82
- &admin_dennis 8F79E6CD6434700615867480D11A514F5095BFA8 - &admin_dennis 8F79E6CD6434700615867480D11A514F5095BFA8
- &admin_richie 29F5017C95D9E60B1B1E8407072B0E0B8312DFE3
# Generate AGE keys from SSH keys with: # Generate AGE keys from SSH keys with:
# nix-shell -p ssh-to-age --run 'ssh some.ssh.wavelens.io cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age' # nix-shell -p ssh-to-age --run 'ssh some.ssh.wavelens.io cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age'
- &palatine-hill age1z8q02wdp0a2ep5uuffgfeqlfam4ztl95frhw5qhnn6knn0rrmcnqk5evej - &palatine-hill age1z8q02wdp0a2ep5uuffgfeqlfam4ztl95frhw5qhnn6knn0rrmcnqk5evej
- &photon age13aqs2mx66dmnyd74sygnwavufv6a4pwnvcqj4ud4l94jk0tjgu6ss57slw - &photon age13aqs2mx66dmnyd74sygnwavufv6a4pwnvcqj4ud4l94jk0tjgu6ss57slw
- &jeeves-jr age1lffr5f5nz0nrenv3ekgy27e8sztsx4gfp3hfymkz77mqaa5a4gts0ncrrh
# update keys by executing: sops updatekeys secrets.yaml # update keys by executing: sops updatekeys secrets.yaml
creation_rules: creation_rules:
- path_regex: systems/jeeves-jr/secrets\.yaml$
key_groups:
- pgp:
- *admin_alice
- *admin_dennis
- *admin_richie
age:
- *jeeves-jr
- path_regex: systems/palatine-hill/secrets\.yaml$ - path_regex: systems/palatine-hill/secrets\.yaml$
key_groups: key_groups:
- pgp: - pgp:
- *admin_alice - *admin_alice
- *admin_dennis - *admin_dennis
- *admin_richie
age: age:
- *palatine-hill - *palatine-hill
@ -23,6 +35,7 @@ creation_rules:
- pgp: - pgp:
- *admin_alice - *admin_alice
- *admin_dennis - *admin_dennis
- *admin_richie
age: age:
- *photon - *photon
@ -31,6 +44,7 @@ creation_rules:
- pgp: - pgp:
- *admin_alice - *admin_alice
age: age:
- *jeeves-jr
- *palatine-hill - *palatine-hill
- *photon - *photon
@ -39,5 +53,15 @@ creation_rules:
- pgp: - pgp:
- *admin_dennis - *admin_dennis
age: age:
- *jeeves-jr
- *palatine-hill
- *photon
- path_regex: users/richie/secrets\.yaml$
key_groups:
- pgp:
- *admin_richie
age:
- *jeeves-jr
- *palatine-hill - *palatine-hill
- *photon - *photon