infra/.sops.yaml

# SOPS configuration — defines who can decrypt which files
# age public keys only (safe to commit)
creation_rules:
  - path_regex: ^secrets\.sops\.json$
    age: >-
      age1z64h9t3acsm2rr74pz7j4846kwj5tutx9sk78jqv46y8fln4vs2sy920ce,
      age1hrafaswdslw4u63scxp8u5ye4tf8h0xjah0v85w280phy06m0vespz2u0n
[ci skip] phase 1: SOPS tooling setup (.sops.yaml, scripts/tg, .gitignore) Part of SOPS multi-user secrets migration. - .sops.yaml: defines age recipients (Viktor + CI) - scripts/tg: wrapper that decrypts secrets before running terragrunt - .gitignore: excludes decrypted secrets.auto.tfvars.json No functional change — terraform.tfvars still works as before. 2026-03-07 13:57:42 +00:00			`# SOPS configuration — defines who can decrypt which files`
			`# age public keys only (safe to commit)`
			`creation_rules:`
			`- path_regex: ^secrets\.sops\.json$`
			`age: >-`
			`age1z64h9t3acsm2rr74pz7j4846kwj5tutx9sk78jqv46y8fln4vs2sy920ce,`
			`age1hrafaswdslw4u63scxp8u5ye4tf8h0xjah0v85w280phy06m0vespz2u0n`