.sops.yaml

keys:
  - &admin_workstation age1z9fxldccff0xtmudz4gc44srmf4865vp3r77t3srv5jwmrp8jdcsjdafmt
  - &admin_mini-nix age1xzjwd38z08yra4h6vttp0duqhl3fy65nlcrd000jrcr8hjmzk3qsxgs5fk
  - &admin_letouch age1q0dsdexnmmqxej4emyn9sg6l7y4lh80hhd5958q4e0x6fd8dks0s4fv8nx
  - &server_adguard_lxc age1ew6eh5z96z67jqx5anvaylmz9srhnhlehrgacysrh7tvqvqedp0qgrx3k3
  - &server_mini-nix age1yk7ve29tg0amjud953r86nrefhumsn9xsznz4n53l0je6zzt0uhsta27ea
  - &server_infrastructure age1vjhly9gdhewd4d8l6duqh06lvyvrczzkraj8n7r9dym86dehe9vq39uhph
  - &server_headscale age1ewj2skz6kevkzmlc72cc7tw3kx7przgyjlh5upj438u48x05v9eqpgmhuj
  - &server_nixos-rica age1zeg03ugddf4atteqz3t4lygrmejyrmj5j25mf3kefsfpphahxfmsxt4yjd
  - &server_thepodfather age1ttr8txnr794dxmw6ngp0ygrvs0reajc5js3t4u3kzelkmjgy0qysnq4ufr
  - &workstation_nixos-workstation age1f3mwf2jsdd4ngrnvhxgq97xg3rk5y4p68dysvrmd860s6dncxggsym6njt
  - &workstation_letouch age16h88a5peaunsj85q3cadngjdl20g04hpjrwj3msls8waud83w5hqhufajn
creation_rules:
  - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
    key_groups:
    - age:
      - *admin_mini-nix
      - *admin_workstation
      - *admin_letouch
      - *server_mini-nix
      - *server_infrastructure
      - *server_headscale
      - *server_adguard_lxc
      - *server_thepodfather
      - *workstation_nixos-workstation
      - *server_nixos-rica

  - path_regex: secrets/mini-nix/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - age:
        - *admin_mini-nix
        - *admin_workstation
        - *admin_letouch
        - *server_mini-nix

  - path_regex: secrets/headscale/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - age:
        - *admin_mini-nix
        - *admin_workstation
        - *admin_letouch
        - *server_headscale


  - path_regex: secrets/thepodfather/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - age:
        - *admin_mini-nix
        - *admin_workstation
        - *admin_letouch
        - *server_thepodfather

  - path_regex: secrets/tailscale/eric\.yaml
    key_groups:
    - age:
      - *admin_mini-nix
      - *admin_workstation
      - *admin_letouch
      - *workstation_nixos-workstation
      - *workstation_letouch
  - path_regex: secrets/tailscale/headscale\.yaml
    key_groups:
    - age:
      - *admin_mini-nix
      - *admin_workstation
      - *admin_letouch
      - *server_headscale
  - path_regex: secrets/tailscale/infrastructure\.yaml
    key_groups:
    - age:
      - *admin_mini-nix
      - *admin_workstation
      - *admin_letouch
      - *server_infrastructure
      - *server_mini-nix
      - *server_headscale
      - *server_adguard_lxc
      - *server_thepodfather
      - *server_nixos-rica