.sops.yaml

keys:
  - &host_beef age1wq5xj5mwv9xk4tp26cxc4xqjq9xd9hwqv0zeemawl2cc8sarmqesw366dh
  - &host_butcher age1nleq0q2kzh2zn4pyr0dcy0zjnsr6sx8c5ttjahhfttkltsr2s3ksahhpkx
  - &host_nakulaptop age1m6gzjlvx5paan69evccl6kywj0ghdk46prumx4jn4hxcrxd4re6qckdl9w
  - &host_tentacle age190tmygg8xmn9tkj4yjgemvdd8s4tnmycr9n4qfrr0l97zxfq3gjs36xsn8
  - &user_dave age1upzm9um3qljxlmxcg8vl35d7eyeqtnsfcnqlh3wtnj46dhfzwyrqa80avw
  - &user_ireen age1477n5xa2cr4tgdy80vxg24tsdcrcmzarn4ad99tjvrsjedq6sqpqsxyrms
  - &user_media age1zsws94zmm5axrtpswg2pwcfcn04zuwxtm8gm3z75frwvqtquz9rqgugv7f
  - &host_expedition age13uqlmzsyxdxxxkvsql7utjeqyt969jdjl6nh6d0gdqdvz6re05fq6t8xge
  - &host_seed age16wsn8f4wrk4f8ssk76h8hd57e4mquychcju0ny5qhvkzvq0teplqrct0yd
creation_rules:
  - path_regex: hosts/common/secrets/.*
    key_groups:
      - age:
          - *host_beef
          - *host_butcher
          - *host_nakulaptop
          - *user_dave
          - *user_ireen
          - *user_media
          - *host_tentacle
          - *host_expedition
          - *host_seed
  - path_regex: users/secrets.yaml
    key_groups:
      - age:
          - *host_beef
          - *host_butcher
          - *host_nakulaptop
          - *user_dave
          - *host_tentacle
          - *host_expedition
          - *host_seed
  - path_regex: hosts/beef/secrets/.*
    key_groups:
      - age:
          - *host_beef
          - *user_dave
  - path_regex: hosts/butcher/secrets/.*
    key_groups:
      - age:
          - *host_butcher
          - *user_dave
  - path_regex: hosts/nakulaptop/secrets/.*
    key_groups:
      - age:
          - *host_nakulaptop
          - *user_dave
          - *user_ireen
  - path_regex: hosts/tentacle/secrets/.*
    key_groups:
      - age:
          - *host_tentacle
          - *host_beef
          - *user_dave
  - path_regex: hosts/expedition/secrets/.*
    key_groups:
      - age:
          - *host_expedition
          - *host_beef
          - *user_dave
  - path_regex: hosts/seed/secrets/.*
    key_groups:
      - age:
          - *host_seed
          - *host_beef
          - *user_dave
          - *host_beef
          - *user_dave