# .sops.yaml

keys:
  - &primary $SOPS_PUBLIC_KEY
creation_rules:
  - path_regex: secrets/(disks|podman|system)/.*\.yaml$
    key_groups:
    - age:
      - *primary