# Public keys are combination of host + user
keys:
  - &sue_root age1w99m9klvc7m5qtmtmu3l0jx8ksdzp5c4p9rkvh5fdullfc6afemqv5py2q
  - &sue_pim age189laethzry4ylnd790dmpuc4xjjuwqxruc76caj3ceqhqug4g9qs0upuvw
  - &gamepc_root age1y5wgcxmn37drmjtpgld3xc76mw8dckhred8hecusywjlvdyfedfse8y60u
  - &gamepc_pim age1qlldg2c6kptvnmvlkpf9pae3wnczk6eklcmwdvnzyvvnur3aqdcq3c3trt
  - &warwick_root age1th8rdw4fs3vmgy9gzc0k9xy88tddjj4vasepckfx9h4nlzsg3q3q4cjgwu
  - &niels age159whjxeyw94xmkkephmtlur8e85xd9d5vnvkwkcayfv7el0neqfq863yga

creation_rules:
  - path_regex: machines/sue/nixos.sops.yaml
    key_groups:
      - age:
        - *sue_root
  - path_regex: machines/sue/pim.sops.yaml
    key_groups:
      - age:
        - *sue_pim
        - *sue_root
  - path_regex: machines/gamepc/nixos.sops.yaml
    key_groups:
      - age:
        - *sue_pim
        - *sue_root
        - *gamepc_root
  - path_regex: machines/gamepc/pim.sops.yaml
    key_groups:
      - age:
        - *sue_pim
        - *sue_root
        - *gamepc_root
        - *gamepc_pim
  - path_regex: machines/warwick/nixos.sops.yaml
    key_groups:
      - age:
        - *warwick_root
        - *sue_pim
        - *sue_root
        - *niels
  - path_regex: secrets/servers.sops.yaml
    key_groups:
      - age:
        - *warwick_root
        - *sue_pim
        - *sue_root
        - *niels