keys: # cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age
  - &chn age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
  - &pc age1ffvr5pqd2lfj24e3fh53s92z6h76fda3du4y4k6r3yjumdwvpfgqzj033a
  - &vps4 age1yvrl4y0r6yzcxzzkgfwshlrtsjt8uuya6rfwks09pnft7esfcyvqmrtm5q
  - &vps6 age164tyqklwhdm57tfm5u863mdt2xrzrrzac4py8a0j9y6kzqcjy9zsp073t6
  - &nas age19lhcwk37jmvn6z0v4dpdfh0k4u23f76twdjknc0p7atktf37rd7s4t4wj3
  - &one age1m7nrxfw22wvp7pj8y9pdl745w95x89uu8dzl9ppsaazweqf2lqms5yshsp
  - &srv1-node0 age1nzetyehldf3gl6pr6mu5d2cv387p8wjqn6wfpll7a3sl8us6n38s0ds633
  - &srv1-node1 age1wj33xt8nj7rhnsenepsf6k3lmq5vk4wn84jwr55qy9cwu05xn5cspg3h7t
  - &srv1-node2 age16e7ykphshal6qhwfvat698hl48s8yr0jvzh27ecdyfh5uk7t9u6s753jgy
  - &srv2-node0 age1l4stuz0vr7gs7pqwjrmezam44702jp2vmqaqyxw0l0r42kf9updq4dfhrw
  - &srv2-node1 age1hnarptkze0ujpp05dqr8uma04cxg9zqcx68qgpks5uf5l6rpk5gqhh8wxg
  - &srv3 age1n4lhfwv7g0vhx54exmwx9yv2z04m3h2lunzpa5zdzgtcvjjuf5nqc36g8a
  - &test age1vgqvdqqe3mn0gvh0hydvu9c5f9yn5vek08cagyvwjhyta6utpvuq00g9c2
  - &test-pc age17a8y4yr2ckuek67rt786ujuf7705gvj3vv6ezktxxmgayea9zcyqet7hgc
  - &test-pc-vm age1wmcayhf9eyx9e9yp97850mqas9ns455crce8hfmvnupgcxd6sews5r0cln
  - &steamdeck age1x7gda43xxsggveu8q2pajttlmgwsjhmksv7hzv3r270gyrpk8a5sza87gz
creation_rules:
  - path_regex: devices/pc/.*$
    key_groups: [{ age: [ *chn, *pc ] }]
  - path_regex: devices/vps4/.*$
    key_groups: [{ age: [ *chn, *vps4 ] }]
  - path_regex: devices/vps6/.*$
    key_groups: [{ age: [ *chn, *vps6 ] }]
  - path_regex: devices/nas/.*$
    key_groups: [{ age: [ *chn, *nas ] }]
  - path_regex: devices/one/.*$
    key_groups: [{ age: [ *chn, *one ] }]
  - path_regex: devices/srv1/secrets/.*$
    key_groups: [{ age: [ *chn, *srv1-node0, *srv1-node1, *srv1-node2 ] }]
  - path_regex: devices/srv1/node0/.*$
    key_groups: [{ age: [ *chn, *srv1-node0 ] }]
  - path_regex: devices/srv1/node1/.*$
    key_groups: [{ age: [ *chn, *srv1-node1 ] }]
  - path_regex: devices/srv1/node2/.*$
    key_groups: [{ age: [ *chn, *srv1-node2 ] }]
  - path_regex: devices/srv2/secrets/.*$
    key_groups: [{ age: [ *chn, *srv2-node0, *srv2-node1 ] }]
  - path_regex: devices/srv2/node0/.*$
    key_groups: [{ age: [ *chn, *srv2-node0 ] }]
  - path_regex: devices/srv2/node1/.*$
    key_groups: [{ age: [ *chn, *srv2-node1 ] }]
  - path_regex: devices/srv3/.*$
    key_groups: [{ age: [ *chn, *srv3 ] }]
  - path_regex: devices/test/.*$
    key_groups: [{ age: [ *chn, *test ] }]
  - path_regex: devices/test-pc/.*$
    key_groups: [{ age: [ *chn, *test-pc ] }]
  - path_regex: devices/test-pc-vm/.*$
    key_groups: [{ age: [ *chn, *test-pc-vm ] }]
  - path_regex: devices/steamdeck/.*$
    key_groups: [{ age: [ *chn, *steamdeck ] }]
  - path_regex: devices/cross/secrets/default.yaml$
    key_groups:
    - age: [ *chn, *pc, *vps4, *vps6, *nas, *one, *srv1-node0, *srv1-node1, *srv1-node2, *srv2-node0, *srv2-node1,
      *srv3, *test, *test-pc, *test-pc-vm, *steamdeck ]
  - path_regex: devices/cross/secrets/chn.yaml$
    key_groups:
    - age: [ *chn, *pc, *one, *nas ]