keys:
  - &host_burnham age12cgkgx8xac77q0rwakp6zrfrzp45mhk7wj6t3y8s0xurt3k879usnm66ct
  - &host_challenger age1j43eqpnq5hy6zt3gmdtzdnne2yfvccd832kpt69qavst44leec6sj2l773
  - &host_defiant age128md9emufxu35kgww3a90sw40vvc60f5xul9n9ndvw4lfnj3ndaqq44u64
  - &host_voyager age14jzavfeg47pgnrstea6yzvh3s3a578nj8hkk8g79vxyzpn86gslscp23qu
  - &user_felixalb age1nj7ju6f3jfvzw4c0sxywthjmztwp7rwqceun8xw2tlfrt7qymatser4vqf

creation_rules:
  # Global secrets
  - path_regex: secrets/[^/]+\.yaml$
    key_groups:
    - age:
      - *user_felixalb

  # Host specific secrets
  - path_regex: secrets/burnham/[^/]+\.yaml$
    key_groups:
    - age:
      - *host_burnham
      - *user_felixalb

  - path_regex: secrets/challenger/[^/]+\.yaml$
    key_groups:
    - age:
      - *host_challenger
      - *user_felixalb

  - path_regex: secrets/defiant/[^/]+\.yaml$
    key_groups:
    - age:
      - *host_defiant
      - *user_felixalb

  - path_regex: secrets/voyager/[^/]+\.yaml$
    key_groups:
    - age:
      - *host_voyager
      - *user_felixalb