Richie
825362c3ea
treefmt / nix fmt (pull_request) Successful in 3s
build_systems / prebuild-common-x86-64-v3 (pull_request) Successful in 21s
build_systems / build-portal-1 (pull_request) Successful in 18s
build_systems / build-bob (pull_request) Successful in 32s
build_systems / build-brain (pull_request) Successful in 40s
build_systems / build-rhapsody-in-green (pull_request) Successful in 39s
test ebook search / test-ebook-search (pull_request) Successful in 1m7s
build_systems / build-jeeves (pull_request) Successful in 1m11s
treefmt / nix fmt (push) Successful in 4s
build_systems / prebuild-common-x86-64-v3 (push) Successful in 5s
build_systems / build-portal-1 (push) Successful in 17s
build_systems / build-bob (push) Successful in 25s
build_systems / build-brain (push) Successful in 31s
build_systems / build-rhapsody-in-green (push) Successful in 30s
test ebook search / test-ebook-search (push) Successful in 1m5s
build_systems / build-jeeves (push) Successful in 1m0s
56 lines
1.8 KiB
YAML
56 lines
1.8 KiB
YAML
# Generate AGE keys from SSH keys with:
|
|
# ssh-keygen -A
|
|
# nix-shell -p ssh-to-age --run 'cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age'
|
|
# update keys after addin/removing a key
|
|
# nix-shell -p sops --run "sops updatekeys users/secrets.yaml" users/secrets.yaml
|
|
|
|
keys:
|
|
- &admin_richie age1u8zj599elqqvcmhxn8zuwrufsz8w8w366d3ayrljjejljt2q45kq8mxw9c # cspell:disable-line
|
|
|
|
- &system_bob age1q47vup0tjhulkg7d6xwmdsgrw64h4ax3la3evzqpxyy4adsmk9fs56qz3y # cspell:disable-line
|
|
- &system_brain age1jhf7vm0005j60mjq63696frrmjhpy8kpc2d66mw044lqap5mjv4snmwvwm # cspell:disable-line
|
|
- &system_jeeves age13lmqgc3jvkyah5e3vcwmj4s5wsc2akctcga0lpc0x8v8du3fxprqp4ldkv # cspell:disable-line
|
|
- &system_rhapsody age1ufnewppysaq2wwcl4ugngjz8pfzc5a35yg7luq0qmuqvctajcycs5lf6k4 # cspell:disable-line
|
|
- &system_portal_1 age1cm7ujz4t9cyc3nyy0w30l2addggk0gy8h3shd9yq47jg845tndnsa3utfl # cspell:disable-line
|
|
|
|
creation_rules:
|
|
- path_regex: users/secrets\.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *admin_richie
|
|
- *system_bob
|
|
- *system_brain
|
|
- *system_jeeves
|
|
- *system_rhapsody
|
|
- *system_portal_1
|
|
|
|
- path_regex: systems/bob/secrets\.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *admin_richie
|
|
- *system_bob
|
|
|
|
- path_regex: systems/brain/secrets\.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *admin_richie
|
|
- *system_brain
|
|
|
|
- path_regex: systems/jeeves/secrets\.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *admin_richie
|
|
- *system_jeeves
|
|
|
|
- path_regex: systems/rhapsody-in-green/secrets\.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *admin_richie
|
|
- *system_rhapsody
|
|
|
|
- path_regex: systems/portal-1/secrets\.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *admin_richie
|
|
- *system_portal_1
|