nixos/.sops.yaml

keys: # cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age
  - &chn age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
  - &pc age1ffvr5pqd2lfj24e3fh53s92z6h76fda3du4y4k6r3yjumdwvpfgqzj033a
  - &vps6 age164tyqklwhdm57tfm5u863mdt2xrzrrzac4py8a0j9y6kzqcjy9zsp073t6
  - &vps7 age137x7csalutwvfygvvzpemlsywvdxj3j4z93a50z2sjx03w6zau8q3r5902
  - &surface age1ck5vzs0xqx0jplmuksrkh45xwmkm2t05m2wyq5k2w2mnkmn79fxs6tvl3l
  - &nas age19lhcwk37jmvn6z0v4dpdfh0k4u23f76twdjknc0p7atktf37rd7s4t4wj3
  - &xmupc1 age1hnarptkze0ujpp05dqr8uma04cxg9zqcx68qgpks5uf5l6rpk5gqhh8wxg
  - &xmupc2 age1l4stuz0vr7gs7pqwjrmezam44702jp2vmqaqyxw0l0r42kf9updq4dfhrw
creation_rules:
  - path_regex: devices/pc/secrets/.*$
    key_groups:
    - age:
      - *chn
      - *pc
  - path_regex: devices/vps6/secrets/.*$
    key_groups:
    - age:
      - *chn
      - *vps6
  - path_regex: devices/vps7/secrets/.*$
    key_groups:
    - age:
      - *chn
      - *vps7
  - path_regex: devices/nas/secrets/.*$
    key_groups:
    - age:
      - *chn
      - *nas
  - path_regex: devices/surface/secrets/.*$
    key_groups:
    - age:
      - *chn
      - *surface
  - path_regex: devices/xmupc1/secrets/.*$
    key_groups:
    - age:
      - *chn
      - *xmupc1
  - path_regex: devices/xmupc2/secrets/.*$
    key_groups:
    - age:
      - *chn
      - *xmupc2
move rsshub to vps7 2023-08-14 22:11:57 +08:00			`keys: # cat /etc/ssh/ssh_host_ed25519_key.pub \| ssh-to-age`
init 2023-05-28 23:49:58 +08:00			`- &chn age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m`
修改 hostname 为 pc 2023-09-01 21:18:09 +08:00			`- &pc age1ffvr5pqd2lfj24e3fh53s92z6h76fda3du4y4k6r3yjumdwvpfgqzj033a`
update vps6 age key 2023-08-03 18:12:54 +08:00			`- &vps6 age164tyqklwhdm57tfm5u863mdt2xrzrrzac4py8a0j9y6kzqcjy9zsp073t6`
move rsshub to vps7 2023-08-14 22:11:57 +08:00			`- &vps7 age137x7csalutwvfygvvzpemlsywvdxj3j4z93a50z2sjx03w6zau8q3r5902`
surface: adjust 2024-01-17 16:22:07 +08:00			`- &surface age1ck5vzs0xqx0jplmuksrkh45xwmkm2t05m2wyq5k2w2mnkmn79fxs6tvl3l`
nas: final setup 2023-09-10 14:53:59 +08:00			`- &nas age19lhcwk37jmvn6z0v4dpdfh0k4u23f76twdjknc0p7atktf37rd7s4t4wj3`
devices.xmupc1: re-encrypt 2024-02-26 14:05:00 +08:00			`- &xmupc1 age1hnarptkze0ujpp05dqr8uma04cxg9zqcx68qgpks5uf5l6rpk5gqhh8wxg`
devices.xmupc2: finalize setup 2024-03-09 15:43:43 +08:00			`- &xmupc2 age1l4stuz0vr7gs7pqwjrmezam44702jp2vmqaqyxw0l0r42kf9updq4dfhrw`
init 2023-05-28 23:49:58 +08:00			`creation_rules:`
move secrets to devices 2024-03-07 18:10:10 +08:00			`- path_regex: devices/pc/secrets/.*$`
init 2023-05-28 23:49:58 +08:00			`key_groups:`
			`- age:`
			`- *chn`
修改 hostname 为 pc 2023-09-01 21:18:09 +08:00			`- *pc`
move secrets to devices 2024-03-07 18:10:10 +08:00			`- path_regex: devices/vps6/secrets/.*$`
add sops for vps6 2023-07-31 22:14:31 +08:00			`key_groups:`
			`- age:`
			`- *chn`
			`- *vps6`
move secrets to devices 2024-03-07 18:10:10 +08:00			`- path_regex: devices/vps7/secrets/.*$`
move rsshub to vps7 2023-08-14 22:11:57 +08:00			`key_groups:`
			`- age:`
			`- *chn`
			`- *vps7`
move secrets to devices 2024-03-07 18:10:10 +08:00			`- path_regex: devices/nas/secrets/.*$`
add nas xmupc1 to all system 2023-08-23 20:22:27 +08:00			`key_groups:`
			`- age:`
			`- *chn`
nas: final setup 2023-09-10 14:53:59 +08:00			`- *nas`
move secrets to devices 2024-03-07 18:10:10 +08:00			`- path_regex: devices/surface/secrets/.*$`
yoga bootstrap 2023-08-19 11:41:56 +08:00			`key_groups:`
			`- age:`
			`- *chn`
surface: adjust 2024-01-17 16:22:07 +08:00			`- *surface`
move secrets to devices 2024-03-07 18:10:10 +08:00			`- path_regex: devices/xmupc1/secrets/.*$`
init xmupc1 2023-12-14 23:16:21 +08:00			`key_groups:`
			`- age:`
			`- *chn`
			`- *xmupc1`
devices.xmupc2: finalize setup 2024-03-09 15:43:43 +08:00			`- path_regex: devices/xmupc2/secrets/.*$`
			`key_groups:`
			`- age:`
			`- *chn`
			`- *xmupc2`