keys:
  - &host_burnham age12cgkgx8xac77q0rwakp6zrfrzp45mhk7wj6t3y8s0xurt3k879usnm66ct
  - &host_challenger age1j43eqpnq5hy6zt3gmdtzdnne2yfvccd832kpt69qavst44leec6sj2l773
  - &host_defiant age128md9emufxu35kgww3a90sw40vvc60f5xul9n9ndvw4lfnj3ndaqq44u64
  - &host_morn age14ar8q5454khxxf5ur2nxwk533nzycz2lh3635qwz35wh8yq0jpqskj2ksx
  - &user_felixalb_sisko age1phc4fkt25n4wtzg88sg3fhvmy6tv8pguyxp5c9js83ae3z374adsxfpqkl
  - &user_felixalb_worf age1nj7ju6f3jfvzw4c0sxywthjmztwp7rwqceun8xw2tlfrt7qymatser4vqf

creation_rules:
  # Global secrets
  - path_regex: secrets/[^/]+\.yaml$
    key_groups:
    - age:
      - *user_felixalb_sisko
      - *user_felixalb_worf

  # Host specific secrets
  - path_regex: secrets/burnham/[^/]+\.yaml$
    key_groups:
    - age:
      - *host_burnham
      - *user_felixalb_sisko
      - *user_felixalb_worf

  - path_regex: secrets/challenger/[^/]+\.yaml$
    key_groups:
    - age:
      - *host_challenger
      - *user_felixalb_sisko
      - *user_felixalb_worf

  - path_regex: secrets/defiant/[^/]+\.yaml$
    key_groups:
    - age:
      - *host_defiant
      - *user_felixalb_sisko
      - *user_felixalb_worf

  - path_regex: secrets/morn/[^/]+\.yaml$
    key_groups:
    - age:
      - *host_morn
      - *user_felixalb_sisko
      - *user_felixalb_worf