.sops.yaml

keys:
  - &user_sun 8CC5C91F72DB57DA20BD848C6523836CF4992251
  - &host_desktop age1v6lnkm7prm0dpmcdpvn44v50rpfkzsed5uv3znxt4grsd5y6sv5qjru9qq
  - &host_aliyun_hz0 age157z6a5nzx8myrgqatmzwpd76srxy59xvzpk95fn83hu8ss8j9eyssu03vr
  - &host_aliyun_hz1 age1d6zx2svldrydqs3qscu90nf6xswleh22273xe895llvmu709qaqqgu55jr
creation_rules:
  - path_regex: ^nixos/desktop/
    key_groups:
      - pgp:
          - *user_sun
        age:
          - *host_desktop
  - path_regex: ^nixos/aliyun-hz0/
    key_groups:
      - pgp:
          - *user_sun
        age:
          - *host_aliyun_hz0
  - path_regex: ^nixos/aliyun-hz1/
    key_groups:
      - pgp:
          - *user_sun
        age:
          - *host_aliyun_hz1
  # TODO: add a backup key
  - path_regex: ^infra/
    key_groups:
      - pgp:
          - *user_sun
  # Fallback
  - key_groups:
      - pgp:
          - *user_sun
        age:
          - *host_desktop
          - *host_aliyun_hz0
          - *host_aliyun_hz1