From 704868d9cc4fcf9566d0f668273ea28d3f6ae006 Mon Sep 17 00:00:00 2001
From: Grisha Shipunov
Date: Sun, 11 Jan 2026 18:48:50 +0100
Subject: yeet pgp, rotate keys

---
 .sops.yaml | 63 +++++++++++++++++++++++++++++++-------------------------------
 1 file changed, 32 insertions(+), 31 deletions(-)

(limited to '.sops.yaml')

diff --git a/.sops.yaml b/.sops.yaml
index 3a89dd0..74029b9 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,5 +1,6 @@
 keys:
-  - &admin_oxa DD0998E6CDF294537FC604F991FA5E5BF9AA901C
+  - &admin_frituurpan ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
+  - &admin_toaster ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
   # hosts
   - &toaster age1x5cpzua9h9kz772d0udvlmvpmk688ua4fxjmmcqfm2rnpxsp5a5sn03r0z
   - &cloud age1j3xpuuqaph5z885er90mftfsu6g3hw4q469k37a3veqktwntzdpqgue4z5
@@ -15,61 +16,61 @@ keys:
 creation_rules:
   - path_regex: hosts/toaster/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *toaster
   - path_regex: hosts/cloud/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *cloud
   - path_regex: hosts/minime/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *minime
   - path_regex: hosts/auth/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *auth
   - path_regex: hosts/radicale/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *radicale
   - path_regex: hosts/immich/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *immich
   - path_regex: hosts/miniflux/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *miniflux
   - path_regex: hosts/forgejo/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *forgejo
   - path_regex: hosts/conduwuit/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *conduwuit
   - path_regex: hosts/stream/[^/]+\.yaml$
     key_groups:
-      - pgp:
-        - *admin_oxa
-        age:
+      - age:
+        - *admin_toaster
+        - *admin_frituurpan
         - *stream
-- 
cgit v1.3.1