26 lines
1.1 KiB
YAML
26 lines
1.1 KiB
YAML
# Generate AGE keys from SSH keys with:
|
|
# ssh-keygen -A
|
|
# nix-shell -p ssh-to-age --run 'cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age'
|
|
# update keys after addin/removing a key
|
|
# nix-shell -p sops --run "sops updatekeys users/secrets.yaml" users/secrets.yaml
|
|
|
|
keys:
|
|
- &admin_richie age1u8zj599elqqvcmhxn8zuwrufsz8w8w366d3ayrljjejljt2q45kq8mxw9c # cspell:disable-line
|
|
|
|
- &system_bob age1q47vup0tjhulkg7d6xwmdsgrw64h4ax3la3evzqpxyy4adsmk9fs56qz3y # cspell:disable-line
|
|
- &system_brain age1jhf7vm0005j60mjq63696frrmjhpy8kpc2d66mw044lqap5mjv4snmwvwm # cspell:disable-line
|
|
- &system_jeeves age13lmqgc3jvkyah5e3vcwmj4s5wsc2akctcga0lpc0x8v8du3fxprqp4ldkv # cspell:disable-line
|
|
- &system_rhapsody age1ufnewppysaq2wwcl4ugngjz8pfzc5a35yg7luq0qmuqvctajcycs5lf6k4 # cspell:disable-line
|
|
- &system_portal_1 age1vyav6kxtvt3z4vtnkkjj38eu8hlts5m7ygyckhskvalg2gpjk52su53d0a # cspell:disable-line
|
|
|
|
creation_rules:
|
|
- path_regex: users/secrets\.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *admin_richie
|
|
- *system_bob
|
|
- *system_brain
|
|
- *system_jeeves
|
|
- *system_rhapsody
|
|
- *system_portal_1
|