nixos-config/.sops.yaml

keys:
  - &lotte 46C6A7E14BC7812E86C2700737FE303AAC2D06CD
  - &nixos-8gb-fsn1-1 age1273ps5thcy70ckdt0270s2nysqgu48t38pq3wq975v3y7mf4eavsw38wsl
  - &nutty-noon age1py6eyelfttya52wc2v2ar7fx5htr5jw6snl4shx98sw8nuaw2pesyhseul
  - &thinkrac age15c2dquc22epmmndpmd8pa3077fdl8nyr5qehr7y0c9uvavrledsq326ak9
  - &nas age1c7y687sxh428wk34s8ws6kemu62mggafpt40rmanevgkuj5xa59q6f7tlc
  - &instance-20221213-1915 age1elra3uklw8rmwkevqms2l4tsd06d5utqda9d2w4qvqpz898uzuesugxkhc
  - &devterm age1z5ryq3pehydapv0s90ljak3yct3qwwtt43wjp9kv48q2235s252s6fq4kc
creation_rules:
  - path_regex: secrets/shared\.yaml$
    key_groups:
      - age:
          - *nixos-8gb-fsn1-1
          - *nutty-noon
          - *thinkrac
          - *nas
          - *instance-20221213-1915
          - *devterm
        pgp:
          - *lotte
  - path_regex: secrets/nixos-8gb-fsn1-1\.yaml$
    key_groups:
      - age:
          - *nixos-8gb-fsn1-1
        pgp:
          - *lotte
  - path_regex: secrets/nutty-noon\.yaml$
    key_groups:
      - age:
          - *nutty-noon
        pgp:
          - *lotte
  - path_regex: secrets/thinkrac\.yaml$
    key_groups:
      - age:
          - *thinkrac
        pgp:
          - *lotte
  - path_regex: secrets/nixos\.yaml$
    key_groups:
      - pgp:
          - *lotte
  - path_regex: secrets/nas\.yaml$
    key_groups:
      - age:
          - *nas
        pgp:
          - *lotte
  - path_regex: secrets/desktop\.yaml$
    key_groups:
      - age:
          - *nutty-noon
          - *thinkrac
          - *devterm
        pgp:
          - *lotte
  - path_regex: secrets/instance-20221213-1915\.yaml$
    key_groups:
      - age:
          - *instance-20221213-1915
        pgp:
          - *lotte
  - path_regex: secrets/devterm\.yaml$
    key_groups:
      - age:
          - *devterm
        pgp:
          - *lotte
Add sops 2022-01-14 15:13:55 +01:00			`keys:`
switch sops to my pgp key 2022-02-02 19:03:03 +01:00			`- &lotte 46C6A7E14BC7812E86C2700737FE303AAC2D06CD`
Add sops 2022-01-14 15:13:55 +01:00			`- &nixos-8gb-fsn1-1 age1273ps5thcy70ckdt0270s2nysqgu48t38pq3wq975v3y7mf4eavsw38wsl`
reinstall nutty-noon 2023-02-18 09:56:19 +01:00			`- &nutty-noon age1py6eyelfttya52wc2v2ar7fx5htr5jw6snl4shx98sw8nuaw2pesyhseul`
switch thinkrac back to zfs 2022-04-13 07:29:08 +01:00			`- &thinkrac age15c2dquc22epmmndpmd8pa3077fdl8nyr5qehr7y0c9uvavrledsq326ak9`
add secrets for nas 2022-04-24 11:35:13 +01:00			`- &nas age1c7y687sxh428wk34s8ws6kemu62mggafpt40rmanevgkuj5xa59q6f7tlc`
Add the host key for the initrd and correct the sops key path 2022-12-14 16:12:49 +01:00			`- &instance-20221213-1915 age1elra3uklw8rmwkevqms2l4tsd06d5utqda9d2w4qvqpz898uzuesugxkhc`
devterm: bringup 2023-03-27 17:32:12 +01:00			`- &devterm age1z5ryq3pehydapv0s90ljak3yct3qwwtt43wjp9kv48q2235s252s6fq4kc`
Add sops 2022-01-14 15:13:55 +01:00			`creation_rules:`
Add aws credentials 2022-12-14 10:46:40 +01:00			`- path_regex: secrets/shared\.yaml$`
			`key_groups:`
			`- age:`
			`- *nixos-8gb-fsn1-1`
			`- *nutty-noon`
			`- *thinkrac`
			`- *nas`
			`- *instance-20221213-1915`
devterm: bringup 2023-03-27 17:32:12 +01:00			`- *devterm`
Add aws credentials 2022-12-14 10:46:40 +01:00			`pgp:`
			`- *lotte`
feat: move the secrets into the parent directory fix #58 2022-03-09 17:27:09 +01:00			`- path_regex: secrets/nixos-8gb-fsn1-1\.yaml$`
Add sops 2022-01-14 15:13:55 +01:00			`key_groups:`
			`- age:`
			`- *nixos-8gb-fsn1-1`
switch sops to my pgp key 2022-02-02 19:03:03 +01:00			`pgp:`
			`- *lotte`
feat: move the secrets into the parent directory fix #58 2022-03-09 17:27:09 +01:00			`- path_regex: secrets/nutty-noon\.yaml$`
Add sops stuff 2022-01-18 11:30:21 +01:00			`key_groups:`
			`- age:`
Update wireguard config 2022-01-18 13:54:53 +01:00			`- *nutty-noon`
switch sops to my pgp key 2022-02-02 19:03:03 +01:00			`pgp:`
Update the secrets 2022-01-18 13:51:34 +00:00			`- *lotte`
feat: move the secrets into the parent directory fix #58 2022-03-09 17:27:09 +01:00			`- path_regex: secrets/thinkrac\.yaml$`
Add thinkrac 2022-01-29 15:50:06 +01:00			`key_groups:`
			`- age:`
add thinkpad to the thinkpad secret file 2022-01-29 17:24:31 +01:00			`- *thinkrac`
switch sops to my pgp key 2022-02-02 19:03:03 +01:00			`pgp:`
			`- *lotte`
feat: Add bcachefs support to thinkrac, add installer 2022-03-22 08:37:15 +01:00			`- path_regex: secrets/nixos\.yaml$`
			`key_groups:`
			`- pgp:`
			`- *lotte`
init: nas 2022-04-24 09:39:44 +01:00			`- path_regex: secrets/nas\.yaml$`
			`key_groups:`
add secrets for nas 2022-04-24 11:35:13 +01:00			`- age:`
			`- *nas`
			`pgp:`
init: nas 2022-04-24 09:39:44 +01:00			`- *lotte`
Add .aws/credentials 2022-05-11 19:34:55 +01:00			`- path_regex: secrets/desktop\.yaml$`
			`key_groups:`
			`- age:`
			`- *nutty-noon`
			`- *thinkrac`
devterm: bringup 2023-03-27 17:32:12 +01:00			`- *devterm`
Add .aws/credentials 2022-05-11 19:34:55 +01:00			`pgp:`
			`- *lotte`
Add basic config for instance-20221213-1915 2022-12-13 21:20:34 +01:00			`- path_regex: secrets/instance-20221213-1915\.yaml$`
			`key_groups:`
			`- age:`
			`- *instance-20221213-1915`
			`pgp:`
			`- *lotte`
devterm: bringup 2023-03-27 17:32:12 +01:00			`- path_regex: secrets/devterm\.yaml$`
			`key_groups:`
			`- age:`
			`- *devterm`
			`pgp:`
			`- *lotte`