# sops-nix encryption rules.
#
# To get started:
#   nix-shell -p age --run 'mkdir -p ~/.config/sops/age && age-keygen -o ~/.config/sops/age/keys.txt'
# Then copy the public key (the line starting with "# public key:") into the
# placeholder below.

keys:
  - &laptop age1REPLACE_ME_WITH_YOUR_LAPTOP_PUBLIC_KEY

creation_rules:
  - path_regex: hosts/watcher/secrets\.yaml$
    key_groups:
      - age: [*laptop]