nixos/.sops.yaml

keys:
  - &malte D5FEA546C06B3AEC97EB7F5A437B3369EAE401C4
  - &helix-texta age1n5cse9mz50hxc2syzpjhkw9kar3eq9lr00ju4el9fu32nvqjzq5s5j4r4j
  - &elysia-clarki age1gg85h42mndpuc5qpxg2a794pj9szp6g020ry05tmy9rxgh2aa4asq4vfh4
  - &achatina-fulica age1320r0g70sgmprz0dzk9n7nkuhcmf3ju0pmv002mgd5rgghvazyxqtt9c80
  - &trochulus-hispidus age1un55h66zlhm4vmf7800q0c5n24zwpwvyllhmu68x33kkf2kwu9dsts8ztg
  - &murex-pecten age1txlfvwlahwjy3ujeefsp7ket5c575schwc24a07j4twu0jxzqgwse4n78a
  - &cornu-aspersum age1vrdd5yese20vcklv4dkclhfwhs5r9vufka8mevdxkt57fmukld5qj5r342
  - &granodomus-lima age1fs6es4rnw0p79husxq2vut7zv4p9ecm5quaamldstlvg5kgzjpdstalllk
  - &faunus-ater age1wwv873rqxtl7050n5uldy02tj2sft3yqvlqtjl2naazjvuk8yq2s7vflxt
  - &polymita-picta age1c9pnv970vt2c88u3ra4zxnhz6j76la4nm3ddcuws9a6mfpnw43lspaud83
creation_rules:
  - path_regex: secrets/[^/]+\.yaml$
    key_groups:
    - pgp:
      - *malte
      age:
      - *helix-texta
      - *elysia-clarki
      - *achatina-fulica
      - *trochulus-hispidus
      - *murex-pecten
      - *faunus-ater
  - path_regex: secrets/hosts/helix-texta/[^/]+\.yaml$
    key_groups:
    - pgp:
      - *malte
      age:
      - *helix-texta
  - path_regex: secrets/hosts/elysia-clarki/[^/]+\.yaml$
    key_groups:
    - pgp:
      - *malte
      age:
      - *elysia-clarki
  - path_regex: secrets/hosts/faunus-ater/[^/]+\.yaml$
    key_groups:
    - pgp:
      - *malte
      age:
      - *faunus-ater
  - path_regex: secrets/hosts/achatina-fulica/[^/]+\.yaml$
    key_groups:
    - pgp:
      - *malte
      age:
      - *achatina-fulica
  - path_regex: secrets/hosts/trochulus-hispidus/[^/]+\.yaml$
    key_groups:
    - pgp:
      - *malte
      age:
      - *trochulus-hispidus
  - path_regex: secrets/hosts/murex-pecten/[^/]+\.yaml$
    key_groups:
    - pgp:
      - *malte
      age:
      - *murex-pecten
  - path_regex: secrets/hosts/cornu-aspersum/[^/]+\.yaml$
    key_groups:
    - pgp:
      - *malte
      age:
      - *cornu-aspersum
  - path_regex: secrets/hosts/granodomus-lima/[^/]+\.yaml$
    key_groups:
    - pgp:
      - *malte
      age:
      - *granodomus-lima

  # Home-manager secrets
  # TODO: Improve
  - path_regex: secrets/users/malte/[^/]+\.yaml$
    key_groups:
    - pgp:
      - *malte
      age:
      - *helix-texta
      - *murex-pecten
  - path_regex: secrets/users/marie/[^/]+\.yaml$
    key_groups:
    - pgp:
      - *malte
      age:
      - *trochulus-hispidus
      - *murex-pecten
  - path_regex: secrets/users/deck/[^/]+\.yaml$
    key_groups:
    - pgp:
      - *malte
      age:
      - *polymita-picta
Try managing secrets 2021-12-04 12:47:59 +01:00			`keys:`
rekey faunus-ater secrets, fix fingerprint 2023-11-06 17:59:12 +01:00			`- &malte D5FEA546C06B3AEC97EB7F5A437B3369EAE401C4`
Try managing secrets 2021-12-04 12:47:59 +01:00			`- &helix-texta age1n5cse9mz50hxc2syzpjhkw9kar3eq9lr00ju4el9fu32nvqjzq5s5j4r4j`
			`- &elysia-clarki age1gg85h42mndpuc5qpxg2a794pj9szp6g020ry05tmy9rxgh2aa4asq4vfh4`
[achatina-fulica] Add GLaDOS module 2021-12-06 11:07:15 +01:00			`- &achatina-fulica age1320r0g70sgmprz0dzk9n7nkuhcmf3ju0pmv002mgd5rgghvazyxqtt9c80`
Restructure secrets, add restic secrets 2022-01-13 21:20:59 +01:00			`- &trochulus-hispidus age1un55h66zlhm4vmf7800q0c5n24zwpwvyllhmu68x33kkf2kwu9dsts8ztg`
[host/murex-pecten] Add secrets 2022-01-14 12:40:14 +01:00			`- &murex-pecten age1txlfvwlahwjy3ujeefsp7ket5c575schwc24a07j4twu0jxzqgwse4n78a`
[host/achatina-fulica] R.I.P I dropped the VPS instance. Grafana and Radicale have been moved to cornu-aspersum. [module/radicale] Improved the module, used secrets. 2022-01-14 17:24:43 +01:00			`- &cornu-aspersum age1vrdd5yese20vcklv4dkclhfwhs5r9vufka8mevdxkt57fmukld5qj5r342`
[host/granodomus-lima] Add secrets 2023-01-15 17:28:10 +01:00			`- &granodomus-lima age1fs6es4rnw0p79husxq2vut7zv4p9ecm5quaamldstlvg5kgzjpdstalllk`
[host/faunus-ater] Disable testing services, setup paperless 2022-06-05 11:50:44 +02:00			`- &faunus-ater age1wwv873rqxtl7050n5uldy02tj2sft3yqvlqtjl2naazjvuk8yq2s7vflxt`
[host/polymita-picta,user/malte] Prepare steam deck superiority 2022-12-01 22:54:40 +01:00			`- &polymita-picta age1c9pnv970vt2c88u3ra4zxnhz6j76la4nm3ddcuws9a6mfpnw43lspaud83`
Try managing secrets 2021-12-04 12:47:59 +01:00			`creation_rules:`
			`- path_regex: secrets/[^/]+\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *malte`
			`age:`
			`- *helix-texta`
Restructure secrets, add restic secrets 2022-01-13 21:20:59 +01:00			`- *elysia-clarki`
[achatina-fulica] Add GLaDOS module 2021-12-06 11:07:15 +01:00			`- *achatina-fulica`
Restructure secrets, add restic secrets 2022-01-13 21:20:59 +01:00			`- *trochulus-hispidus`
[host/murex-pecten] Add secrets 2022-01-14 12:40:14 +01:00			`- *murex-pecten`
[host/faunus-ater] Disable testing services, setup paperless 2022-06-05 11:50:44 +02:00			`- *faunus-ater`
Restructure secrets, add restic secrets 2022-01-13 21:20:59 +01:00			`- path_regex: secrets/hosts/helix-texta/[^/]+\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *malte`
			`age:`
			`- *helix-texta`
			`- path_regex: secrets/hosts/elysia-clarki/[^/]+\.yaml$`
Try managing secrets 2021-12-04 12:47:59 +01:00			`key_groups:`
			`- pgp:`
			`- *malte`
			`age:`
			`- *elysia-clarki`
[host/faunus-ater] Disable testing services, setup paperless 2022-06-05 11:50:44 +02:00			`- path_regex: secrets/hosts/faunus-ater/[^/]+\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *malte`
			`age:`
			`- *faunus-ater`
Restructure secrets, add restic secrets 2022-01-13 21:20:59 +01:00			`- path_regex: secrets/hosts/achatina-fulica/[^/]+\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *malte`
			`age:`
			`- *achatina-fulica`
			`- path_regex: secrets/hosts/trochulus-hispidus/[^/]+\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *malte`
			`age:`
			`- *trochulus-hispidus`
[host/murex-pecten] Add secrets 2022-01-14 12:40:14 +01:00			`- path_regex: secrets/hosts/murex-pecten/[^/]+\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *malte`
			`age:`
			`- *murex-pecten`
[host/achatina-fulica] R.I.P I dropped the VPS instance. Grafana and Radicale have been moved to cornu-aspersum. [module/radicale] Improved the module, used secrets. 2022-01-14 17:24:43 +01:00			`- path_regex: secrets/hosts/cornu-aspersum/[^/]+\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *malte`
			`age:`
			`- *cornu-aspersum`
[host/granodomus-lima] Add new host 2023-01-15 16:52:17 +01:00			`- path_regex: secrets/hosts/granodomus-lima/[^/]+\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *malte`
			`age:`
			`- *granodomus-lima`
Restructure secrets, add restic secrets 2022-01-13 21:20:59 +01:00
[host/murex-pecten] Add secrets 2022-01-14 12:40:14 +01:00			`# Home-manager secrets`
			`# TODO: Improve`
Restructure secrets, add restic secrets 2022-01-13 21:20:59 +01:00			`- path_regex: secrets/users/malte/[^/]+\.yaml$`
Try managing secrets 2021-12-04 12:47:59 +01:00			`key_groups:`
			`- pgp:`
			`- *malte`
			`age:`
			`- *helix-texta`
[host/murex-pecten] Add secrets 2022-01-14 12:40:14 +01:00			`- *murex-pecten`
Restructure secrets, add restic secrets 2022-01-13 21:20:59 +01:00			`- path_regex: secrets/users/marie/[^/]+\.yaml$`
[achatina-fulica] Add GLaDOS module 2021-12-06 11:07:15 +01:00			`key_groups:`
			`- pgp:`
			`- *malte`
			`age:`
Restructure secrets, add restic secrets 2022-01-13 21:20:59 +01:00			`- *trochulus-hispidus`
[host/murex-pecten] Make user marie available 2022-01-16 15:55:11 +01:00			`- *murex-pecten`
feat(user/deck): backups to faunus-ater using restic 2024-02-03 20:54:14 +01:00			`- path_regex: secrets/users/deck/[^/]+\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *malte`
			`age:`
			`- *polymita-picta`
Try managing secrets 2021-12-04 12:47:59 +01:00