sops: first secret integration (nix-settings)

This commit is contained in:
Trolli Schmittlauch 2026-04-06 00:14:48 +02:00
parent e8e402e9b7
commit 8914fa79ed
10 changed files with 86 additions and 5 deletions

View file

@ -6,7 +6,12 @@ keys:
- &machine_framenix age1kx93vp8l8jd6kz0kvk379udr5z8a9t6946w0ff5t9a2esn47nqzqlfzvwe
creation_rules:
# per-host secrets for host specific ones, but for service modules we could store and manage them also per module scope
- path_regex: hosts/framenix/secrets/[^/]+\.(yaml|json|env|ini)$
- path_regex: hosts/framenix/secrets\.(yaml|json|env|ini)$
key_groups:
- age:
- *admins
- *machine_framenix
- path_regex: common/secrets\.(yaml|json|env|ini)$
key_groups:
- age:
- *admins