.sops.yaml

keys:
  # People
  # TODO: Add @ruru (I was not able to find a current gpg key @e1mo)
  - &e1mo 67BEE56343B6420D550EDF2A6D617FD0A85BAADA
  - &adb B1480CFF9BBE8E2648A26A640B2E7C171E3AD6D7
  - &momme 5D22C6EC4A6E52469819B56D5EBCCEF2F33F7661

  # Servers
  - &shirley age14ysl953378r2vvy7ft3gwce9xp83pr6wypf5lgx2yjwx2lxra5qs6j8eqe
  - &goldberg age1w3wqxt5t00hjv43dcxlr5rjec5mvuzz9ajc8k04azq0gfx0ncgysu6mdmm
  - &hamilton age1uw83n25fx9th2q5y2yedeyzmtzk5yjtwx0kh054v5r2mxc0utuwqacdf77
  - &hopper age1hzg5camzwyaj0t89xwu7zr506tk02c2z6k0ayh8pfml2lfvl6assyw2xkk
creation_rules:
  - path_regex: secrets\/all\/*
    key_groups:
      - pgp: [ *e1mo, *adb, *momme ]
        age:
        - *shirley
        - *goldberg
        - *hamilton
        - *hopper
  - path_regex: secrets\/shirley\/*
    key_groups:
      - pgp: [ *e1mo, *adb, *momme ]
        age:
        - *shirley
  - path_regex: secrets\/goldberg\/*
    key_groups:
      - pgp: [ *e1mo, *adb, *momme ]
        age:
        - *goldberg
  - path_regex: secrets\/hamilton\/*
    key_groups:
      - pgp: [ *e1mo, *adb, *momme ]
        age:
        - *hamilton
  - path_regex: secrets\/hopper\/*
    key_groups:
      - pgp: [ *e1mo, *adb, *momme ]
        age:
        - *hopper