Rebase to flake parts #5

2026-05-08 18:59:40 -03:00
parent 064ba9655a
commit d51f41566c
6 changed files with 207 additions and 0 deletions
@@ -0,0 +1,24 @@
+keys:
+  - &primary age1yyzgmazjxkvwtfcv9re3lqmt2ru5dcrfu3sauysm0wzfwzvyap8qkjkq32
+  - &host_14900k age1elk6zwmcylwfk7gd4pjda7g29upftjvxys8py42s8d42jklnyv7s7dm9z2
+  - &host_uConsole age193gw802ytal7h5p5q37kpd9079k2vsflzmnvupcwfxh2kjdrwqtsk3g6rm
+  - &host_t2mbp age1yr7vurfxc3w8ewfw9djfm54atw6ayze69qglamecuft5q0n9gu2sadsa2m
+  - &host_ideapad age1m30m9xzszmcawte35m0yymz42gfx3x84w7d5l67mtdtajhgpfgssuc2plm
+  - &host_nix-server age1p05z980kdtngk9mw67hfev72h7xhslplpxfk9yskgmf0hl4lu3ls04zht9
+creation_rules:
+  - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
+    key_groups:
+      - age:
+          - *primary
+          - *host_14900k
+          - *host_uConsole
+          - *host_t2mbp
+          - *host_ideapad
+          - *host_nix-server
+  # Host secrets at modules/hosts/nix-server/secrets.yaml (see configuration imports),
+  # or optional extra files under _secrets/.
+  - path_regex: modules/hosts/nix-server/(secrets\.(yaml|json|env|ini)|_secrets/.*\.(yaml|json|env|ini))$
+    key_groups:
+      - age:
+          - *primary
+          - *host_nix-server