# SOPS encryption policy: encrypt files matching *.sops.yaml

creation_rules:
  - path_regex: (secrets/.*|inventory/.*/secrets[^/]*\.(yaml|yml|json))$
    key_groups:
      - age:
          - age1aq8twfd78wvpra0had8cezcnj96tj4q0068edrz5jez8d6xwmflqdepsh4