finn.markwitz/nixos
1
1
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat: Sops for Jupiter Setup

Browse Source
This commit is contained in:
finn.markwitz
2026-09-19 18:48:53 +02:00
parent 4691eb1aa4
commit 5a2a649244
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.sops.yaml
+7 -5
View File
@@ -1,7 +1,7 @@
keys: keys:
- &admin_finn age1a0v442ct2qfjcdhyktn25spw02yq4fl08plrrvuradwwxzsle4mq8thln4 - &admin_finn age1a0v442ct2qfjcdhyktn25spw02yq4fl08plrrvuradwwxzsle4mq8thln4
- &host_mibook age1n3uqtee5ymykrls6k04dznq50cwmj99hw7ny83yxjndt4y2ncf5qhjwa2p - &host_mibook age1n3uqtee5ymykrls6k04dznq50cwmj99hw7ny83yxjndt4y2ncf5qhjwa2p
# - &host_jupiter age1... # TODO: Phase 9, see docs/secrets.md - &host_jupiter age15uxuaxhn2hr4ypmgll36fwnkdkvv6gynvlxuc2p8ek0enmxmr5rsvlq0r2
creation_rules: creation_rules:
- path_regex: ^secrets/mibook\.yaml$ - path_regex: ^secrets/mibook\.yaml$
@@ -9,9 +9,11 @@ creation_rules:
- age: - age:
- *admin_finn - *admin_finn
- *host_mibook - *host_mibook
# - path_regex: ^secrets/jupiter\.yaml$ # TODO: Phase 9 - path_regex: ^secrets/jupiter\.yaml$
# key_groups: key_groups:
# - age: [ *admin_finn, *host_jupiter ] - age:
# - path_regex: ^secrets/common\.yaml$ # TODO: Phase 9 - *admin_finn
- *host_jupiter
# - path_regex: ^secrets/common\.yaml$ # TODO: only if/when a secret needs to be shared across both hosts
# key_groups: # key_groups:
# - age: [ *admin_finn, *host_mibook, *host_jupiter ] # - age: [ *admin_finn, *host_mibook, *host_jupiter ]