nixos-config/.sops.yaml

keys:
  - &chunk age1eg6sxflw6l44fp20sl068sampwd95fm0mnh4ssegrhtktgm50ptqcuspyn
  - &yt age1sy0at69err83qyml2vqu8xvwjccfws447aaadfvacj2qluw3p45s2mtrw8
  - &cy age10h6pg5qdpc4t0rpmksfv788a57f04n83zgqaezkjjn65nkhv547s0vxfdn
  - &titan age12w2xgh4nxhrrggrtcnu75wgukqnayzhfd2azkhukl6u8xqxsqvtsa4lmhl
creation_rules:
  - path_regex: secrets/de3911/yt.yaml
    key_groups:
      - age:
          - *yt
          - *cy
  - path_regex: secrets/de3911/chunk.yaml
    key_groups:
      - age:
          - *chunk
          - *cy
  - path_regex: secrets/de3911/titan.yaml
    key_groups:
      - age:
          - *titan
          - *cy
  - path_regex: secrets/services/ntfy.yaml
    key_groups:
      - age:
          - *chunk
          - *yt
          - *titan
          - *cy
  - path_regex: secrets/restic/yt.yaml
    key_groups:
      - age:
          - *yt
          - *cy
  - path_regex: secrets/borg/yt.yaml
    key_groups:
      - age:
          - *yt
          - *cy
  - path_regex: secrets/borg/chunk.yaml
    key_groups:
      - age:
          - *chunk
          - *cy
  - path_regex: secrets/borg/titan.yaml
    key_groups:
      - age:
          - *titan
          - *cy
  - path_regex: secrets/wireguard/yt.yaml
    key_groups:
      - age:
          - *yt
          - *cy
  - path_regex: secrets/wireguard/chunk.yaml
    key_groups:
      - age:
          - *chunk
          - *cy
  - path_regex: secrets/services/caddy.yaml
    key_groups:
      - age:
          - *chunk
          - *cy
          - *titan
  - path_regex: secrets/services/hedgedoc.yaml
    key_groups:
      - age:
          - *chunk
          - *cy
  - path_regex: secrets/services/miniflux.yaml
    key_groups:
      - age:
          - *chunk
          - *cy
  - path_regex: secrets/services/gitlab.yaml
    key_groups:
      - age:
          - *chunk
          - *cy
  - path_regex: secrets/services/vaultwarden.yaml
    key_groups:
      - age:
          - *chunk
          - *cy
  - path_regex: secrets/rclone.yaml
    key_groups:
      - age:
          - *chunk
          - *yt
          - *cy
  - path_regex: secrets/newsboat.yaml
    key_groups:
      - age:
          - *yt
          - *cy
  - path_regex: secrets/services/attic.yaml
    key_groups:
      - age:
          - *chunk
          - *cy
  - path_regex: secrets/services/garage.yaml
    key_groups:
      - age:
          - *chunk
          - *cy
  - path_regex: secrets/services/tailscale.yaml
    key_groups:
      - age:
          - *chunk
          - *cy
init 2024-12-16 20:03:01 -05:00			`keys:`
			`- &chunk age1eg6sxflw6l44fp20sl068sampwd95fm0mnh4ssegrhtktgm50ptqcuspyn`
			`- &yt age1sy0at69err83qyml2vqu8xvwjccfws447aaadfvacj2qluw3p45s2mtrw8`
add cy age key 2024-12-19 18:34:48 -05:00			`- &cy age10h6pg5qdpc4t0rpmksfv788a57f04n83zgqaezkjjn65nkhv547s0vxfdn`
take ghost to titan 2024-12-28 22:46:25 -05:00			`- &titan age12w2xgh4nxhrrggrtcnu75wgukqnayzhfd2azkhukl6u8xqxsqvtsa4lmhl`
init 2024-12-16 20:03:01 -05:00			`creation_rules:`
			`- path_regex: secrets/de3911/yt.yaml`
			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *yt`
			`- *cy`
init 2024-12-16 20:03:01 -05:00			`- path_regex: secrets/de3911/chunk.yaml`
			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *chunk`
			`- *cy`
setup backup on titan and nix fmt 2024-12-30 23:14:50 -05:00			`- path_regex: secrets/de3911/titan.yaml`
			`key_groups:`
			`- age:`
			`- *titan`
			`- *cy`
init 2024-12-16 20:03:01 -05:00			`- path_regex: secrets/services/ntfy.yaml`
			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *chunk`
			`- *yt`
setup backup on titan and nix fmt 2024-12-30 23:14:50 -05:00			`- *titan`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *cy`
secrets: add chunk secrets 2024-12-16 21:02:06 -05:00			`- path_regex: secrets/restic/yt.yaml`
init 2024-12-16 20:03:01 -05:00			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *yt`
			`- *cy`
secrets: add chunk secrets 2024-12-16 21:02:06 -05:00			`- path_regex: secrets/borg/yt.yaml`
init 2024-12-16 20:03:01 -05:00			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *yt`
			`- *cy`
secrets: add chunk secrets 2024-12-16 21:02:06 -05:00			`- path_regex: secrets/borg/chunk.yaml`
init 2024-12-16 20:03:01 -05:00			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *chunk`
			`- *cy`
setup backup on titan and nix fmt 2024-12-30 23:14:50 -05:00			`- path_regex: secrets/borg/titan.yaml`
			`key_groups:`
			`- age:`
			`- *titan`
			`- *cy`
init 2024-12-16 20:03:01 -05:00			`- path_regex: secrets/wireguard/yt.yaml`
			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *yt`
			`- *cy`
init 2024-12-16 20:03:01 -05:00			`- path_regex: secrets/wireguard/chunk.yaml`
			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *chunk`
			`- *cy`
init 2024-12-16 20:03:01 -05:00			`- path_regex: secrets/services/caddy.yaml`
			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *chunk`
			`- *cy`
take ghost to titan 2024-12-28 22:46:25 -05:00			`- *titan`
init 2024-12-16 20:03:01 -05:00			`- path_regex: secrets/services/hedgedoc.yaml`
			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *chunk`
			`- *cy`
init 2024-12-16 20:03:01 -05:00			`- path_regex: secrets/services/miniflux.yaml`
			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *chunk`
			`- *cy`
init 2024-12-16 20:03:01 -05:00			`- path_regex: secrets/services/gitlab.yaml`
			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *chunk`
			`- *cy`
secrets/chunk: add missing secrets and rewrite everything to new structure 2024-12-16 23:20:51 -05:00			`- path_regex: secrets/services/vaultwarden.yaml`
			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *chunk`
			`- *cy`
make yt privy to rclone secret and rm grafana cause prometheus chokes 2024-12-30 15:55:59 -05:00			`- path_regex: secrets/rclone.yaml`
secrets/chunk: add missing secrets and rewrite everything to new structure 2024-12-16 23:20:51 -05:00			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *chunk`
make yt privy to rclone secret and rm grafana cause prometheus chokes 2024-12-30 15:55:59 -05:00			`- *yt`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *cy`
add newsboat and fzf-tab 2024-12-25 02:32:01 -05:00			`- path_regex: secrets/newsboat.yaml`
			`key_groups:`
			`- age:`
treefmt: also check for yaml files 2024-12-28 12:03:07 -05:00			`- *yt`
			`- *cy`
add attic and rm tor 2025-01-05 05:42:52 -05:00			`- path_regex: secrets/services/attic.yaml`
			`key_groups:`
			`- age:`
			`- *chunk`
			`- *cy`
bring back garage (#1) make it work with my fork Reviewed-on: https://git.cy7.sh/cy/infra/pulls/1 2025-01-11 23:18:22 -05:00			`- path_regex: secrets/services/garage.yaml`
			`key_groups:`
			`- age:`
			`- *chunk`
			`- *cy`
configure tailscale and stuff 2025-01-24 01:10:53 -05:00			`- path_regex: secrets/services/tailscale.yaml`
			`key_groups:`
			`- age:`
			`- *chunk`
			`- *cy`