# See https://github.com/Mic92/dotfiles/blob/d6114726d859df36ccaa32891c4963ae5717ef7f/nixos/.sops.yaml
keys:
  - &matt-pgp CBCB9B18A6B8930B0B6ABFD1CCB8CBEB30633684
  - &matt age157jemphjzg6zmk373vpccuguyw6e75qnkqmz8pcnn2yue85p939swqqhy0
  - &matt_pi5 age1wpvfpv5n32lruk7c0da4uaeapsmhjxdvg8z4ljehn06l6g2y0e0sum404l
  - &desktop age1jv8ap5zwa49ftv0gg7wqf5ps0e68uuwxe2fekjsn0zkyql964unqyc58rf
  - &admin age1pm3fehmmk0vmnrscz9vm96rakn46aaldr5ydpscmde3v9x0k3faswwdzxs
  - &jallen-nas age1mn2afyp9my7y7hcyzum0wdwt49zufnkt8swnyy8pj30cwzs4zvgsthj0lt
  - &pi5 age1t2d5scrukk0guva5sr97a8tge5j8kd865adezrcru7p269pzwvpsamkgje
  - &deck age1c8qw59ffcq9l77gfmtyc3djtvt3md0u6dwhrjcgsm98ntyf72ufqugj7cg
  - &steamdeck age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0
  - &matt_macbook-pro age12gu9hqhd56yl5x3t5yenkn9yg57du08h77vzjqsmnu5hdppne38qcur5a0
  - &macbook-pro age1t7378n8kmd3f32fkye2gw3jj6qswv3exjdx0dq8kl0xra3tmcdnsvddq3u
  - &nuc age102el4snus37dj807rwvsmlvwu2sg2d8rw3vfmtntgczfkz04l9nshetcq0
  - &admin_nuc age1yn82e39pxt0d0pgny34ux4lkge4ff7wxvsye8ragvwngehemt4ps27phyw
  - &matt_allyx age18z4ctyyj7eq0cmt23eelfzjuacq4fa6hsplyg779d3rdg7ac2q5q2njxqh
  - &allyx age1er5qucsc2mugrzrr7n3xhzv7kemkrqrw4m84r544fkk7nkg5g5eswxkqj0
creation_rules:
  - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - pgp:
          - *matt-pgp
        age:
          - *matt
          - *matt_pi5
          - *desktop
          - *admin
          - *jallen-nas
          - *pi5
          - *deck
          - *steamdeck
          - *matt_macbook-pro
          - *macbook-pro
          - *admin_nuc
          - *nuc
          - *matt_allyx
          - *allyx
  - path_regex: nas-secrets/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - pgp:
          - *matt-pgp
        age:
          - *matt
          - *desktop
          - *admin
          - *jallen-nas
  - path_regex: desktop-secrets/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - pgp:
          - *matt-pgp
        age:
          - *matt
          - *desktop
          - *admin
          - *jallen-nas
  - path_regex: allyx-secrets/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - pgp:
          - *matt-pgp
        age:
          - *matt
          - *desktop
          - *deck
          - *steamdeck
          - *admin
          - *jallen-nas
          - *matt_allyx
          - *allyx
  - path_regex: pi5-secrets/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - pgp:
          - *matt-pgp
        age:
          - *matt
          - *matt_pi5
          - *desktop
          - *pi5
          - *admin
          - *jallen-nas
  - path_regex: mac-secrets/[^/]+\.(yaml|json|env|ini)$
    key_groups:
      - pgp:
          - *matt-pgp
        age:
          - *matt
          - *matt_pi5
          - *desktop
          - *pi5
          - *admin
          - *jallen-nas
          - *matt_macbook-pro
          - *macbook-pro