mirror of
https://github.com/allaunthefox/Research-Stack.git
synced 2026-07-31 03:05:21 +00:00
38 lines
939 B
YAML
38 lines
939 B
YAML
# SOPS configuration for Research Stack
|
|
# Uses age for encryption.
|
|
# Post-quantum: standard age (X25519 + ChaCha20-Poly1305) is NOT post-quantum.
|
|
# PQC adoption tracked in 4-Infrastructure/docs/pqc-posture.md
|
|
#
|
|
# Usage:
|
|
# sops --encrypt --in-place <file>
|
|
# sops <file> # decrypt, edit, re-encrypt
|
|
# sops --decrypt <file> # decrypt to stdout
|
|
|
|
keys:
|
|
- &primary age1tp4vr565zkmvnyulatpyaj6z8zrz7q9mpaypz85yz8rty99crdasualxyr
|
|
|
|
creation_rules:
|
|
- path_regex: 4-Infrastructure/infra/secrets/.*
|
|
key_groups:
|
|
- age:
|
|
- *primary
|
|
|
|
- path_regex: 4-Infrastructure/deploy/.*/.*\.env$
|
|
key_groups:
|
|
- age:
|
|
- *primary
|
|
|
|
- path_regex: 4-Infrastructure/storage/restic/.*\.env$
|
|
key_groups:
|
|
- age:
|
|
- *primary
|
|
|
|
- path_regex: API KEYS/.*
|
|
key_groups:
|
|
- age:
|
|
- *primary
|
|
|
|
- path_regex: \.env$
|
|
key_groups:
|
|
- age:
|
|
- *primary
|