Split secrets into further directories

2024-05-03 15:12:35 +02:00 · 2024-05-03 15:12:35 +02:00 · 9c88c7a3be
commit 9c88c7a3be
parent cfb5bf7539
1 changed files with 19 additions and 1 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -3,7 +3,25 @@ keys:
  - &host_manu-surface age1ytjxrfkag8n73zym7ptt0axsehtxt85gf06qxdtyntzpcqcd34wqa5kv25
  - &host_der-geret age1nxlfrn0rs7kplgyd37plnwxy9yn9wmqwqw4xs5g5lr8xqqgl3ecql7mq3w
 creation_rules:
-  - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
+  -
+    path_regex: secrets/[^/]+\.(ya?ml|json|env(\.*)?|ini)$
+    key_groups:
+      -
+        pgp:
+          - *admin_manuel
+        age:
+          - *host_manu-surface
+          - *host_der-geret
+  -
+    path_regex: secrets/manuel/[^/]+\.(ya?ml|json|env(\.*)?|ini)$
+    key_groups:
+      -
+        pgp:
+          - *admin_manuel
+        age:
+          - *host_manu-surface
+          - *host_der-geret
+  -
    key_groups:
      -
        pgp: