keys:
  - &user age1nlta6ek2fsre42g38ytwg3fxtra4h444psd7g986md0gzmvv6d5qqlwwjy
  - &oparic-local-dev age1mgxmpfpy6qg374kyq66cc5yw68qfw0mlk89rcdy3lkzw9q93jvwqg73395
  - &o4dev age1e80f6ea37ha7udmcctaggak9l44khtcn6e966fhcldrzjjxwzals65yasf
# 按 GPT 的说法, 要想不踩坑, 就绝对不要用宽泛的匹配规则
creation_rules:
  - path_regex: ^secrets/ssh-config\.yaml$
    key_groups:
      - age:
          - *user
  - path_regex: ^secrets/ssh-private\.yaml$
    key_groups:
      - age:
          - *user
  - path_regex: ^secrets/hosts/oparic-local-dev\.yaml$
    key_groups:
      - age:
          - *user
          - *oparic-local-dev
  - path_regex: ^hosts/oparic-local-dev/containers/o4dev/secrets\.yaml$
    key_groups:
      - age:
          - *o4dev