# Public keys are combination of host + user
keys:
  - &sue_root age1w99m9klvc7m5qtmtmu3l0jx8ksdzp5c4p9rkvh5fdullfc6afemqv5py2q
  - &sue_pim age189laethzry4ylnd790dmpuc4xjjuwqxruc76caj3ceqhqug4g9qs0upuvw
  - &gamepc_root age1y5wgcxmn37drmjtpgld3xc76mw8dckhred8hecusywjlvdyfedfse8y60u
  - &gamepc_pim age1qlldg2c6kptvnmvlkpf9pae3wnczk6eklcmwdvnzyvvnur3aqdcq3c3trt
  - &warwick_root age1th8rdw4fs3vmgy9gzc0k9xy88tddjj4vasepckfx9h4nlzsg3q3q4cjgwu
  - &niels age159whjxeyw94xmkkephmtlur8e85xd9d5vnvkwkcayfv7el0neqfq863yga
  - &atlas_root age1unkshctcpucc298kmw9a0qzvtjzgdnjytrxr5p750dv0z95feymqpn68qf

creation_rules:
  - path_regex: secrets/sue/colmena.yaml
    key_groups:
      - age:
        - *sue_root
  - path_regex: secrets/sue/nixos.yaml
    key_groups:
      - age:
        - *sue_root
  - path_regex: secrets/sue/pim.yaml
    key_groups:
      - age:
        - *sue_pim
        - *sue_root
  - path_regex: secrets/gamepc/colmena.yaml
    key_groups:
      - age:
        - *sue_pim
        - *sue_root
  - path_regex: secrets/warwick/colmena.yaml
    key_groups:
      - age:
        - *sue_pim
        - *sue_root
        - *niels
  - path_regex: secrets/servers.yaml
    key_groups:
      - age:
        - *warwick_root
        - *atlas_root
        - *sue_pim
        - *sue_root
        - *niels
  - path_regex: secrets/atlas/colmena.yaml
    key_groups:
      - age:
        - *atlas_root
        - *sue_pim
        - *sue_root
        - *niels
  - path_regex: secrets/kubernetes.yaml
    key_groups:
      - age:
        - *atlas_root
        - *sue_pim
        - *sue_root
        - *niels