keys:
  - &user_albert           D98BBC6C9A27324654C2D8C464F6C4EB46C4543A
  - &host_nixos-framework  b14d3ba0f1ffae0bd891a1f9b34a3ffef77392ca
  - &host_framework-server dfd3a496aba156fa521e82ada77d68dc727cf52b
  - &host_osaka-linode-01  5f548d87ab2b8a4d48d80da3f2ff8352998da7fa
  - &host_piaware-rpi4     4216b645667670a6130bb95a72a56f8269cd0818
  - &host_backups-rpi4     8b37122bb46dc98c208002d65e94778ecd94bd4e
  - &host_quitman-rpi4     7184f4fb827fbacf3d4100c24eb80976cfdd8975

creation_rules:
  - path_regex: secrets\/secrets\.yaml$
    key_groups:
    - pgp:
      - *user_albert
      - *host_osaka-linode-01
      - *host_nixos-framework
      - *host_framework-server
      - *host_piaware-rpi4
      - *host_backups-rpi4
      - *host_quitman-rpi4

  - path_regex: secrets\/wireguard\.yaml$
    key_groups:
    - pgp: 
      - *user_albert
      - *host_osaka-linode-01
      - *host_framework-server
      - *host_backups-rpi4

  - path_regex: secrets\/hosts\/osaka-linode-01\.yaml$
    key_groups:
    - pgp:
      - *user_albert
      - *host_osaka-linode-01

  - path_regex: secrets\/hosts\/nixos-framework\.yaml$
    key_groups:
    - pgp:
      - *user_albert
      - *host_nixos-framework

  - path_regex: secrets\/hosts\/framework-server\.yaml$
    key_groups:
    - pgp:
      - *user_albert
      - *host_framework-server

  - path_regex: secrets\/hosts\/piaware-rpi4\.yaml$
    key_groups:
    - pgp:
      - *user_albert
      - *host_piaware-rpi4

  - path_regex: secrets\/hosts\/backups-rpi4\.yaml$
    key_groups:
    - pgp: 
      - *user_albert
      - *host_backups-rpi4