harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

feat: add ssh key derived age key

Browse source 
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
This commit is contained in:
Harald Hoyer 2025-05-23 12:27:20 +02:00
parent f69eec0a2a
commit c91caf6b6d
11 changed files with 195 additions and 100 deletions
Download patch file Download diff file Expand all files Collapse all files

5
.sops.yaml
View file

@ -4,24 +4,29 @@ keys:
- &server_t15 age1f2yu0cc826ej7hs4g865y29zy9uqfy0yp32f2m80typpk2pxqp7sfcffj4
- &server_x1 age1z87u2na6vts0sqg6sc73p9ym6e5g9a0gf3hp9e7ha47e83zy4efqcjhk0y
- &harald age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
- &harald_ssh age1cpm9xhgue7sjvq7zyeeaxwr96c93sfzxxxj76sxsq7s7kgnygvcq5jxren
creation_rules:
- path_regex: .secrets/hetzner/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *server_hetzner
- *harald
- *harald_ssh
- path_regex: .secrets/sgx/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *server_sgx
- *harald
- *harald_ssh
- path_regex: .secrets/t15/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *server_t15
- *harald
- *harald_ssh
- path_regex: .secrets/x1/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *server_x1
- *harald
- *harald_ssh