# .sops.yaml

keys:
  - &xenon age1jmsrfddctahhznfv7jv77tgw5crmhjhe0e0kzc967hvax4sulv3s6hp2su
  - &mac age1g0vx0dgpzy3et6kuejf4xn4n0acr3666p8j4ygaulefh5mq3vyxs7mgjat
  - &app-01 age1d0crvyst36euqdjsfu22xx87njd9gnmgdam0m289472h8ycmmc9s04v9ru
  - &db-pg17 age1mqetcwrdkwsettnf5mydzmhpyjydj8xy4ezth0ckpjc5r0na6cwqlatm5f
  - &db-mdb11 age16hzcrlm978x5g2frhgr8sm9hjf8f9l9ez5g8adkw2uj4m3h89d5qmzggk2
  - &fs-01 age1e9s4v2k3tfyc0lvz84wkg8uacv6283va58al2yy8dt6jgswf99vs9z4ujt
  - &gms-01 age10lgzwck6lapvsvl7ycg3acp7hgjlt45z5x68qkx95d9jv653443s0pwxhg
  - &hel-01 age1u3h4r85rnffdm3ydfhz67gxuqnkxmafy9pju7saaz0j25k4j43ksmh9792
  - &lax-01 age1whehwala9q7hp8dx6tn27mtuzerxhvwz6wf3f4m54ln6gggzcsns7ax87l
  - &log-01 age1j6t53w5dzxhpm9mp6nuu698p7j5txg5r6zgnfqlfcjpdg454fcsquqswya
  - &nbg-01 age1n2j7c5s98y60j7cvaa8sf85rfpkkhk2s3mfmc22l8yq2uqsedgnswacwq6

creation_rules:
  - path_regex: app-01.yml$
    key_groups:
      - age:
          - *xenon
          - *mac
          - *app-01

  - path_regex: db-mdb11.yml$
    key_groups:
      - age:
          - *xenon
          - *mac
          - *db-mdb11

  - path_regex: db-pg17.yml$
    key_groups:
      - age:
          - *xenon
          - *mac
          - *db-pg17

  - path_regex: fs-01.yml$
    key_groups:
      - age:
          - *xenon
          - *mac
          - *fs-01

  - path_regex: gms-01[\w_]*.(env|yml)$
    key_groups:
      - age:
          - *xenon
          - *mac
          - *gms-01

  - path_regex: hel-01[\w_]*.(env|yml)$
    key_groups:
      - age:
          - *xenon
          - *mac
          - *hel-01

  - path_regex: lax-01[\w_]*.(env|yml)$
    key_groups:
      - age:
          - *xenon
          - *mac
          - *lax-01

  - path_regex: log-01[\w_]*.(env|yml)$
    key_groups:
      - age:
          - *xenon
          - *mac
          - *db-pg17
          - *db-mdb11
          - *fs-01
          - *gms-01
          - *log-01

  - path_regex: nbg-01[\w_]*.(env|yml)$
    key_groups:
      - age:
          - *xenon
          - *mac
          - *nbg-01

  # ===== Service Definitions =====
  - path_regex: app-01_searxng.env
    key_groups:
      - age:
          - *xenon
          - *mac
          - *app-01