# Public keys are combination of host + user
keys:
  - &laptop_root age1w99m9klvc7m5qtmtmu3l0jx8ksdzp5c4p9rkvh5fdullfc6afemqv5py2q
  - &laptop_pim age189laethzry4ylnd790dmpuc4xjjuwqxruc76caj3ceqhqug4g9qs0upuvw
  - &gamepc_root age1y5wgcxmn37drmjtpgld3xc76mw8dckhred8hecusywjlvdyfedfse8y60u
  - &gamepc_pim age1qlldg2c6kptvnmvlkpf9pae3wnczk6eklcmwdvnzyvvnur3aqdcq3c3trt
  - &warwick_root age1th8rdw4fs3vmgy9gzc0k9xy88tddjj4vasepckfx9h4nlzsg3q3q4cjgwu
  - &niels age159whjxeyw94xmkkephmtlur8e85xd9d5vnvkwkcayfv7el0neqfq863yga
  - &atlas_root age1unkshctcpucc298kmw9a0qzvtjzgdnjytrxr5p750dv0z95feymqpn68qf
  - &jefke_root age1upnqu4rpxppdw9zmqu8x3rnaqq2r6m82y25zvry5cec63vjsd9gqtl9e02
  - &lewis_root age108fn93z2c55g9dm9cv5v4w47pykf3khz7e3dmnpv5dhchwnaau0qs20stq

creation_rules:
  - path_regex: secrets/blocktech/colmena.yaml
    key_groups:
      - age:
        - *laptop_root
  - path_regex: secrets/blocktech/nixos.yaml
    key_groups:
      - age:
        - *laptop_root
  - path_regex: secrets/blocktech/pkunis.yaml
    key_groups:
      - age:
        - *laptop_pim
        - *laptop_root
  - path_regex: secrets/gamepc/colmena.yaml
    key_groups:
      - age:
        - *laptop_pim
        - *laptop_root
  - path_regex: secrets/gamepc/pim.yaml
    key_groups:
      - age:
        - *laptop_pim
        - *laptop_root
        - *gamepc_root
        - *gamepc_pim
  - path_regex: secrets/warwick/colmena.yaml
    key_groups:
      - age:
        - *laptop_pim
        - *laptop_root
        - *niels
  - path_regex: secrets/servers.yaml
    key_groups:
      - age:
        - *warwick_root
        - *atlas_root
        - *jefke_root
        - *lewis_root
        - *laptop_pim
        - *laptop_root
        - *niels
  - path_regex: secrets/atlas/colmena.yaml
    key_groups:
      - age:
        - *laptop_pim
        - *laptop_root
        - *niels
  - path_regex: secrets/kubernetes.yaml
    key_groups:
      - age:
        - *atlas_root
        - *jefke_root
        - *lewis_root
        - *laptop_pim
        - *laptop_root
        - *niels
  - path_regex: secrets/jefke/colmena.yaml
    key_groups:
      - age:
        - *laptop_pim
        - *laptop_root
        - *niels
  - path_regex: secrets/lewis/colmena.yaml
    key_groups:
      - age:
        - *laptop_pim
        - *laptop_root
        - *niels
  - path_regex: secrets/lewis/nixos.yaml
    key_groups:
      - age:
        - *lewis_root
        - *laptop_pim
        - *laptop_root
        - *niels