---
creation_rules:
  - # IMPORTANT: Keep this rule first
    path_regex: kubernetes/bootstrap/talos/talsecret(\.sops)?\.ya?ml
    input_type: yaml
    encrypted_regex: ^(token|crt|key|id|secret|secretboxencryptionsecret|ca|bootstraptoken)$
    age: >-
      age1gr4js8ln65khjzjkf9gs5c32a2vrrv6jlv5asuz6hccqq8pddc4sjflprn
  - path_regex: kubernetes/.*/talos/.*\.sops\.ya?ml$
    age: >-
      age1gr4js8ln65khjzjkf9gs5c32a2vrrv6jlv5asuz6hccqq8pddc4sjflprn
  - path_regex: kubernetes/.*\.sops\.ya?ml
    encrypted_regex: "^(data|stringData)$"
    # Homelab
    age: >-
      age1gr4js8ln65khjzjkf9gs5c32a2vrrv6jlv5asuz6hccqq8pddc4sjflprn
  - path_regex: .*\.sops\.(env|ini|json|toml)
    # Homelab
    age: >-
      age1gr4js8ln65khjzjkf9gs5c32a2vrrv6jlv5asuz6hccqq8pddc4sjflprn
  - path_regex: (ansible|terraform|talos)/.*\.sops\.ya?ml
    # Homelab
    age: >-
      age1gr4js8ln65khjzjkf9gs5c32a2vrrv6jlv5asuz6hccqq8pddc4sjflprn