# SOPS encryption policy for railiance-platform
# Encrypts any file matching *.sops.yaml using the shared age key.
# Decrypt: sops -d <file>.sops.yaml
# Encrypt: sops -e -i <file>.sops.yaml
# postgresql-ha deploy is retired; valkey-values.sops.yaml is unused until a consumer exists.

creation_rules:
  - path_regex: \.sops\.yaml$
    key_groups:
      - age:
          - age1aq8twfd78wvpra0had8cezcnj96tj4q0068edrz5jez8d6xwmflqdepsh4
