NixOSConfig/.sops.yaml at main · JulianFP/NixOSConfig · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
keys:
  - &yubikey 3843C723C748227138A7EAA4F22E9E9D8F5CCE04
  - &backupServer age10qfac2ds60xwzrlyfrxvt5kv0gwjpxculsm33rck43npafrt6aks8z69re
  - &IonosVPS2 age190v5scsrpgkw4mues9nlsmwxcn5fw5jwg88pxlsh0xmw6q3kffns6r9eqq
  - &backupServerOffsite age1qzf4xf3r0zl7u8v0u6ct5uv78ejp9gapn8tnphw2a8q39rltceaq6c6n48
  - &Email age1mfzehz2uj6vv0y0lvcv2s5egpqfl6403r30x8v7drztc0tqwd9zq89kqg2
  - &Kanidm age17egct2kj27ze3046aqqje79jtcq0evpjmceehp6uyf3zvqnnayyqjpt6dp
  - &Jellyfin age1d8nx4acd0wsrsk8rkfgvm04vqaal5dcygx5jeumdhsh5s77h234qjxjp0j
  - &Nextcloud age12e9mw8rwsxkqclpcxs3nxcg84l8j8hsxtae5mfn8d9fvnvczw4pqsn8wyf
  - &Nextcloud-Testing age1rjw96c2g46s9qs8s9gy67tz39wm8sq85rzz3cmxvmsgtw32fl43sjegg85
  - &HomeAssistant age1tmsx76qmnw5jp7828vajyq4qdx6lew0t2hcnv58d7dsur84g9qfqey3fyp
  - &ValheimBrueder age19nvp86n9ujxzk0nqw8l5ffnhem7wjxcv32kf9nhfq7ax682al59s4g220v
  - &ValheimMarvin age15r4k9est2u4j2zvv9avd4ts0sv7squftxex7wptqa9hyvsdfqcyq6avm29
  - &Project-W age19ve8km2karr2uvu7r6g8zs4fd9mdrj3dqf9jxkfy6wfqvgdj29mqhkluyc
  - &IonosVPS age1dec54v7jwunmrtgas66unyplac2k7xcj6p2amdxn0y60mn9wmysq8jeq2s
  - &JuliansPC age1ts4z7k5ahqzn9f7qpkdjta8kvjfl8rke2zxp3wlusps9xngyv9eqh3zucz
  - &JuliansFramework age18c4fpcl6mvedfudppdammfg4cmfcemxc98nq733l7h76apdgmsnq939yaz
  - &mainserver age16zwdpg2e4p9ct85xch7zl69nl7tnedwnt4dcxzu7f30d2rwqufqsuy8q6n
creation_rules:
  - path_regex: ^secrets/JuliansFramework/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *JuliansFramework
  - path_regex: ^secrets/JuliansPC/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *JuliansPC
  - path_regex: ^secrets/mainserver/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *mainserver
  - path_regex: ^secrets/IonosVPS/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *IonosVPS
  - path_regex: ^secrets/Nextcloud/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *Nextcloud
  - path_regex: ^secrets/Nextcloud-Testing/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *Nextcloud-Testing
  - path_regex: ^secrets/Jellyfin/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *Jellyfin
  - path_regex: ^secrets/ValheimBrueder/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *ValheimBrueder
  - path_regex: ^secrets/ValheimMarvin/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *ValheimMarvin
  - path_regex: ^secrets/Kanidm/Nextcloud-Testing_client-secret.yaml$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *Kanidm
      - *Nextcloud-Testing
  - path_regex: ^secrets/Kanidm/Nextcloud_client-secret.yaml$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *Kanidm
      - *Nextcloud
  - path_regex: ^secrets/Kanidm/Project-W_client-secret.yaml$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *Kanidm
      - *Project-W
  - path_regex: ^secrets/Kanidm/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *Kanidm
  - path_regex: ^secrets/Email/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *Email
  - path_regex: ^secrets/Project-W/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *Project-W
  - path_regex: ^secrets/HomeAssistant/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *HomeAssistant
  - path_regex: ^secrets/backupServerOffsite/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *backupServerOffsite
  - path_regex: ^secrets/IonosVPS2/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *IonosVPS2
  - path_regex: ^secrets/backupServer/.*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *backupServer
  - path_regex: ^secrets/[^/]*$
    key_groups:
    - pgp:
      - *yubikey
      age:
      - *JuliansFramework
      - *JuliansPC
      - *mainserver
      - *IonosVPS
      - *Nextcloud
      - *Nextcloud-Testing
      - *Jellyfin
      - *ValheimBrueder
      - *ValheimMarvin
      - *Kanidm
      - *Email
      - *Project-W
      - *HomeAssistant
      - *backupServerOffsite
      - *IonosVPS2
      - *backupServer
  - key_groups:
    - pgp:
      - *yubikey