Olivier
4034a6d81d
- Introduced a new secrets file for git-crypt personal documents. - Updated .sops.yaml to include new key groups for host-specific secrets. - Configured Sops settings in client-services.nix for managing secrets. - Removed redundant Sops configurations from multiple host configurations (14900k, ideapad, t2mbp, uConsole) to streamline secret management. - Added git-crypt to desktop-home-base package list.
34 lines
1.3 KiB
YAML
34 lines
1.3 KiB
YAML
keys:
|
|
- &primary age1yyzgmazjxkvwtfcv9re3lqmt2ru5dcrfu3sauysm0wzfwzvyap8qkjkq32
|
|
- &host_14900k age1elk6zwmcylwfk7gd4pjda7g29upftjvxys8py42s8d42jklnyv7s7dm9z2
|
|
- &host_uConsole age193gw802ytal7h5p5q37kpd9079k2vsflzmnvupcwfxh2kjdrwqtsk3g6rm
|
|
- &host_t2mbp age1yr7vurfxc3w8ewfw9djfm54atw6ayze69qglamecuft5q0n9gu2sadsa2m
|
|
- &host_ideapad age1hya7pgpe8zal52w3pjf036tpapmehedatfm4r84h30t4wuh079ssedfd37
|
|
- &host_nix-server age1p05z980kdtngk9mw67hfev72h7xhslplpxfk9yskgmf0hl4lu3ls04zht9
|
|
- &host_r5500 age1pewusvlcgzcnk0kpskgc9qr6jlq8s2yzwnqrnh84p7v5z0kj3qhsya8h2x
|
|
creation_rules:
|
|
- path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
|
|
key_groups:
|
|
- age:
|
|
- *primary
|
|
- *host_14900k
|
|
- *host_uConsole
|
|
- *host_t2mbp
|
|
- *host_ideapad
|
|
- *host_nix-server
|
|
- *host_r5500
|
|
- path_regex: secrets/gitcrypt-personal-docs-key$
|
|
key_groups:
|
|
- age:
|
|
- *primary
|
|
- *host_14900k
|
|
- *host_uConsole
|
|
- *host_t2mbp
|
|
- *host_ideapad
|
|
# Host secrets at modules/hosts/nix-server/secrets.yaml (see configuration imports),
|
|
# or optional extra files under _secrets/.
|
|
- path_regex: modules/hosts/nix-server/(secrets\.(yaml|json|env|ini)|_secrets/.*\.(yaml|json|env|ini))$
|
|
key_groups:
|
|
- age:
|
|
- *primary
|
|
- *host_nix-server |