# sops-nix configuration for age encryption
# Copy this file to .sops.yaml and replace with your age public key
#
# Generate an age key pair:
#   age-keygen -o ~/.config/sops/age/keys.txt
#   # Extract public key: age1... from the generated file
#
# Then encrypt secrets:
#   sops -e -i secrets/secrets.yaml

creation_rules:
  - path_regex: secrets/secrets\.yaml$
    key_groups:
      - age:
          # Replace with your age public key (starts with age1...)
          - age1xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx