stitchy/dotfiles
1
0
Fork 1
Code Issues 2 Pull requests Activity

feat(nix): add sops for secrets

Browse source
This commit is contained in:
stitchy 2025-10-29 22:36:06 -07:00
parent 89232a7cd1
commit d04ba5d01a
Signed by: stitchy
SSH key fingerprint: SHA256:yz2SoxdnY67tfY5Jzb0f2v8f5W3o/IF359kbcquWip8
5 changed files with 75 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

21
.sops.yaml Normal file
View file

@ -0,0 +1,21 @@
keys:
- &server_lappy age1ew0qvrhjafqcdluupf0etgchh7h7987kgqnfvh7plxe44k8xy94qw9pe5n
- &server_tanzanite age1myy382gauvgg77lyaqmj4ty7a9pgzqu85pqufk2rytudg9g8edeq5rupzw
creation_rules:
- path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *admin_lappy
- path_regex: secrets/stitchynyan/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *admin_lappy
- path_regex: secrets/nyadmin/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *admin_tanzanite
- path_regex: secrets/email_accounts/[^/]+\.(yaml|json|env|ini)$
key_groups:
- age:
- *server_tanzanite