keys:
  - &user_albert           D98BBC6C9A27324654C2D8C464F6C4EB46C4543A
  - &host_nixos-vm-01      e743e87411bc58cb492d92a5374315aea8a446f1
  - &host_nixos-framework  11727dab3f62daaf7f92fc1143e3f07ef88bd5a4
  - &host_framework-server dfd3a496aba156fa521e82ada77d68dc727cf52b
  - &host_osaka-linode-01  5f548d87ab2b8a4d48d80da3f2ff8352998da7fa
  - &host_piaware-rpi4     4216b645667670a6130bb95a72a56f8269cd0818
  - &host_backups-rpi4     8b37122bb46dc98c208002d65e94778ecd94bd4e

creation_rules:
  - path_regex: secrets\/secrets\.yaml$
    key_groups:
    - pgp:
      - *user_albert
      - *host_nixos-vm-01
      - *host_osaka-linode-01
      - *host_nixos-framework
      - *host_framework-server
      - *host_piaware-rpi4
      - *host_backups-rpi4

  - path_regex: secrets\/tailscale\.yaml$
    key_groups:
    - pgp:
      - *user_albert
      - *host_nixos-vm-01
      - *host_osaka-linode-01
      - *host_nixos-framework
      - *host_framework-server
      - *host_piaware-rpi4
      - *host_backups-rpi4

  - path_regex: secrets\/wireguard\.yaml$
    key_groups:
    - pgp: 
      - *user_albert
      - *host_osaka-linode-01
      - *host_framework-server

  - path_regex: secrets\/backups-rpi4\.yaml$
    key_groups:
    - pgp: 
      - *user_albert
      - *host_backups-rpi4