# .sops.yaml

keys:
  - &primary $SOPS_PUBLIC_KEY
creation_rules:
  - path_regex: secrets/secrets.yaml$
    key_groups:
    - age:
      - *primary