sops: make root sops connfig universal

2024-04-20 23:12:13 +02:00 · 2024-04-20 23:12:13 +02:00 · a6c4dbcd4b
commit a6c4dbcd4b
parent 871df5a514
1 changed files with 19 additions and 1 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -2,11 +2,29 @@ keys:
  - &magpie       age153y8mz6gqy5t54q4fnrdvjj4v5ls9cgp3hhpd2hzf5tvkcnncf6q4xns0j
  - &mediabox     age19yrl6pr73cv067ksfz0txp3zm2au25jfyjeerw23ml55ps5cyyfqtm3kmt
  - &nixy         age1geqqmsnng2e9sja6uxxmtlwlm4c6e5v6ch3l3yjenstq6tjq4fusr0305s
+
 creation_rules:

-  - path_regex: secrets/[^/]+\.yaml$
+  - path_regex: common/secrets/[^/]+\.yaml$
    key_groups:
    - age:
      - *magpie
      - *mediabox
      - *nixy
+
+  - path_regex: magpie/secrets/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *magpie
+      - *nixy
+
+  - path_regex: mediabox/secrets/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *mediabox
+      - *nixy
+
+  - path_regex: nixy/secrets/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *nixy