nixcfg/.sops.yaml
Harald Hoyer 8a7ac30acf feat(x1): add secrets management and configuration
Introduce encrypted secrets and SOPS configuration for the x1 system. Update SSH and related services to utilize these secrets and modify flake.lock to align with the latest dependencies.
2025-04-04 14:54:25 +02:00

28 lines
942 B
YAML

keys:
- &server_hetzner age1qur4kh3gay9ryk3jh2snvjp6x9eq94zdrmgkrfcv4fzsu7l6lumq4tr3uy
- &server_sgx age149fqcw5jze00vd7jauylrp4j5xyv7amlu57jjfuzghkqtzlnxajs704uz3
- &server_t15 age1f2yu0cc826ej7hs4g865y29zy9uqfy0yp32f2m80typpk2pxqp7sfcffj4
- &server_x1 age1z87u2na6vts0sqg6sc73p9ym6e5g9a0gf3hp9e7ha47e83zy4efqcjhk0y
- &harald age1dwcz3fmp29ju4svy0t0wz4ylhpwlqa8xpw4l7t4gmgqr0ev37qrsfn840l
creation_rules:
- path_regex: .secrets/hetzner/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *server_hetzner
- *harald
- path_regex: .secrets/sgx/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *server_sgx
- *harald
- path_regex: .secrets/t15/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *server_t15
- *harald
- path_regex: .secrets/x1/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *server_x1
- *harald