.sops.yaml: restrict cachix to build{02,03,04}

.sops.yaml

@@ -92,7 +92,7 @@ creation_rules:
           - *zimbatm
           - *zowoq
           - *adisbladis
-  - path_regex: modules/nixos/hercules-ci/.+\.yaml$
+  - path_regex: modules/nixos/(cachix|hercules-ci)/.+\.yaml$
     key_groups:
       - age:
           - *build02

modules/nixos/cachix/secrets.yaml

@@ -6,104 +6,77 @@ sops:
     azure_kv: []
     hc_vault: []
     age:
-        - recipient: age17jtyn2y4fpey6q7ers9gtnh4580xj89zdjuew9nqhxywmsaw94fs5udupc
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByeWxlOGI2Tjd3YkJjekRi
-            UWJQTzJUcnkwazFTUU0wajQ4eEY0NTRBdXlBCnp0YkFhREQxRUhrcXJUVG9XM0Rp
-            a0RmL0t2OTR4a1FkclF2S3RZaUJWNVkKLS0tIHdwWVhVV0VINWlaTHJ5Rnh2OEVo
-            MTNsRnlzclhreXNxNm1BbjZFaHhaSEkKHifW0rYPg3+L70C9c0XuVt6yBLW6EdoW
-            m3/ia+HrNqiF2XbAg7Fc07aWlqQwbT3uaYJrfITT+wH1PdleJWY1Lg==
-            -----END AGE ENCRYPTED FILE-----
         - recipient: age1kh6yvgxz9ys74as7aufdy8je7gmqjtguhnjuxvj79qdjswk2r3xqxf2n6d
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjbFdwOFdQc0lORGNZN05W
-            ODZGSC9TVzhUb2VOeXZIVmRjci9RcjdVWWxnCm5ReHdqV25Kcjg1TkJkTGU1a2Mv
-            TEZDSHhBNGpYVllOYkNDMDJ0YVRiL0UKLS0tIG1UTGZEeWhINXN1Y3dHMk1UVlNH
-            ek5xWkFBSHpxenhjY1lDWUxJa0hick0KkeGRpV+KkSe929IvlK8UbWkaEZqPoOw6
-            xsunXwX1Qji6MChmFHQw9oTCh4ct0Affi+MID35tpfbjBsayXJP0jw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTSENQQ051UmduMis0MHg4
+            a1A5RHR2VlMyZTJnbGtGNnVQMUdPa2cwcGswCmlJMTNzek55NGxNRjFMS2pVWGUw
+            ZmJ0cXlhbWtNZ0J6K2tLUW1PVGZvcE0KLS0tIG4wMTgzRmdWcmNOaVdyTEFyaStp
+            dXlkWFlqWUsrci9aQ0hCaVJXMU1XeEUK5N1oXd7+s4pWyGhcQ2zkFVrasFNxznZz
+            w+fb54LkD7kE86HSk5s4O8YuUXfrgBVtnImOTyETpuusCkbsfjczkQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1qg7tfjwzp6dxwkw9vej6knkhdvqre3fu7ryzsdk5ggvtdx854ycqevlwnq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4ZjZrTTdnWGs4U3Fkbzln
-            WVNaMVhWUy93eW1nNFZlczFvQUNHYXZTbG1rCkZqNVZQTzZvWUU5SkZRdEZPaVE0
-            bUwzaVZoenY4Ny9GMVBRVnpmeitXaFEKLS0tIGIveXJlTmI3MEF6Z0Y5L3c5REhH
-            TTZHNHA3WmV6TGN5NHlzWTVZeml3SzgKMuxvfA1oi3pFRMudPKd6D41xUpew+fjB
-            XiuqrsTCHGMCTvUort+k/v0iiRbqxL2mdYWfi4l7imWX5zlz7hb18g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwanprVHFHaWlZWDhKQzhr
+            bXNLL1RHL1EwUi9YNkhadURWYTcvbGRzcGpVCjQyeGhDK0JMdzBOY0lxMW9BVEly
+            R0pFQ1FMMVZtVVJtamlPamdwTWdyR3cKLS0tIEFvZmlDUmtKT1h1aXJBZ25yM0Zz
+            RDNKZC9JTmVGczkvTFFSTDZvcmtnam8KNelR9AzIW197HwLBDAczqnqeFDLbLi2Q
+            xu90gyz5caeaCUDMchXPqUZFwMw4r4imxiZEx4NmJnS4k/but3uHjg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1r464z5e2shvnh9ekzapgghevr9wy7spd4d7pt5a89ucdk6kr6yhqzv5gkj
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVVHVOYlN5TlVDOFBVTDJS
-            L2ZiT0E0czJlRjhUVzdlRC9JRjZDd25JVVRZCmNJR0U0Y3pSbUtMOUF6SCtlcG1m
-            a2xxaUJmYTkrM3FEQmw0ZjhhOFA0Q3cKLS0tIC9CWmdVc0c4TDAyT3ZMRjZuNzNP
-            bWhqMGMrYUdpVHNXa013M1l5WlgxV28KORmTJ8oBa7F3Sznrq7cnT6Q/jF+jIyCb
-            LtjSM1J4qt5A0RMQkBsGuUi/G/gDGoghJAfHHen8bUYlqbxcy4qnCA==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1dg06e2l664lek3het63vrdrvzyrzt2tcf4peellhxc33aj2wf3ysgja8gl
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4aW1YR1daMStZamMyV1VV
-            SDdVVlZGalRPOGVEUjBZMVlFS0UvRERGU0hZCjNOOU9lR1BEdnFYMXgzZVN4cFpE
-            aW1jaHZKYnN2SUpwejYwb25ucFVhUDAKLS0tIFozQXR6elE3UFEwMW40TGluM214
-            MkVqci9hd2dMaHBxRC8zUlY5R0JQZHMKC/g95NdNCPVpEB/NUumrTpRUv2XOHUzZ
-            +hcniv0eDHgctPtfMuYmjmPUnyTPRcLXamth91YKsy35TDjsc64Syw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age158v8dpppnw3yt2kqgqekwamaxpst5alfrnvvt7z36wfdk4veydrsqxc2tl
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwRG9CQjRVRTVpSFZ0aGVj
-            a25FMUVEd294RmJOSERxQk1CcUx5cFlzV1JvCmdubW85ZjhwNHltV3NJdnB5azhw
-            RGovTEtCK3kzWElFWS93N2lwRERaRkUKLS0tIEdYWnF1SktDeFFkeVpqNVNLQURI
-            Y2N0dThYREl1aXF6bWhGejZJU1BPS0kKtonDMsSa/QPeVclQmD/nVTBk/SR72pKs
-            JIywZAFpfItJKB31hEGQRT7k9SAo/ZIGSO3B9gaCuNxXO0NyAzQKFw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNL1MwVzNOLzNSZ3djbWFB
+            WlYveXR0VjZRc01PdnV3cWxlbXlXREFJVDFJCkVtVFFmd1JRRkJ4Q1kreWpuWk9F
+            djdPWGpHaitGTXdIVDlrRW5pMUlnbEUKLS0tIGUrQ08vWUw4YkVaNStiTGQzQUth
+            TzNMZDZiZXRUUDlZM0JDeEhTT0k4bUUKlBZ2tDj8xKYmd1etzclVq1x8q05SCxL0
+            oE/PrwxnMClgcfEdDLyv/RbdKcC3Q5RfrzhFhsOgf4KwnnCx4kFflA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age17n64ahe3wesh8l8lj0zylf4nljdmqn28hvqns2g7hgm9mdkhlsvsjuvkxz
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxL2xqdFc4WmNXZEE3OVdZ
-            WUtQZnU3U3NIdWlmYU4vcUhzMDIwMkZkWVVjCmNPWW41MlJacXF0Zis2S0lpZm5Z
-            eVI3cU53TDNUcWJXU2M5cFdmNFQxeDgKLS0tIE0yRTFkZ21lNFhMb3NocUFqNVhl
-            cDIwWFhuNFgrUXQxU0RsOEg5M2xsZDAKEcl0VAmQ7emlI22k4HIJh0B5/PiMygt0
-            39kGgqKn4ugu/22edt4iHKDwqihfi6Q7avbECJKxizF3K8qYCR5Mlg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuWGFoWjhvYmxsaVVXNEZ4
+            MFA2U1RhVlNEbmZwM3JWYWNZL0pnWTZsb200CkY5bGw5Z3h3dE1jdkJmTTd6ckVS
+            VnU0MHlnZ0VzcjRXdjlJK251RzJIbGsKLS0tIHM2ZzJXOHZTNFJpeEFDRk5LZFNs
+            NnJIWGhUaU04ZWYrOFM2cWRZTHVSQUUKTnxjbYm0chPqepCQkqTibUJIP88AzT/D
+            fGyl6BFY9vD1lhIiHjjCuHcsOGCgp1ADxbjwKRZp5nViFMW7qVmvzA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1d87z3zqlv6ullnzyng8l722xzxwqr677csacf3zf3l28dau7avfs6pc7ay
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHSCtXRUFkM3UvTGxMa05z
-            MXdRc0xUMXo0a3Y1SzdsNVpPRTJTOVJ2YXdNCmRiWjJuSWFrZjIrNmw1VU9wOUZz
-            cElFK1N4ZEJFSHRGbm0zQWVML3ZYemcKLS0tIHJmRWdjR2l6NTVTeWxMQ3M2UEtW
-            LzRMZHBKbHBVVnFQb2FGdDJFRmdWcHMKlA6bNOdaYe34xloi1h5GoaeVT1WAjNVr
-            +3GnM1V37PhUmQs1yTg3pi9EV5H6frqVp6+5H8IULQh3SZTOiv3Gww==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOZlQ2M2hrZng2MWg3RzJL
+            MGNJa29Na2VYZE5sMmVCVU1nTkkxcUw5R1dnCjBFaHZBdkNpV3JZU1ZQdjI2ZzRP
+            ZGRUUFU3SVNiYk1OdjBaZ3FsQk0yQkkKLS0tIGwvcENuY2hJMnVoejFCcHZlQUVl
+            cmlTR214WVZJWGc3ZFNCamlZL0I5UW8KfxIwdGCM3LZ4SHgCBLC3YSfqzn40ruam
+            8+2Lw39j5TrVAjWevT+rDXNZ9qInJA6EFFNIytxuSHQt5rYL22ZX+A==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1jrh8yyq3swjru09s75s4mspu0mphh7h6z54z946raa9wx3pcdegq0x8t4h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBZ3EwQ3IxUFFWS1VvS2hN
-            SmRYMXQwQjluaXdhS0ljVW9BbHpkaEh0L1JFCkViTDk4dU5VaXdvNWtET3dwOWNL
-            S2hkVzAxWHY0eUEwQmkzZjBBZk5HNTQKLS0tIEQyL0pxN3ZyOWc5VXY5UWJHVC9k
-            UFBBZGFYUU1sK3QwbWlNbmZDNmJzMDQKldGTPYr9cqnWHTZwBz1q7W0XobHH7nH2
-            XJZS0mkAxwNR9FJNZ5pJbs/ELnRXl0WnV9/N9eV6HxzdbOxSe/TCow==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSUU81RUZSc2UveURnZXo3
+            c2ltOEVPYnhaYkRXSFJSanppekwwTnFXYjJRCkFaYjN1K2RaTU5wYUZsSVRzZWYw
+            ZG40ZUNBN3RUdCtKcmF4cGEyZVBWenMKLS0tIFJKdmxHNnZrNTJoN1hyNUdsQnh4
+            QXYyVDdSandaU3ZBT1pkdlk3bE1HcmcKhmtkHXeDB+j9oLbEv6mhcttPQLaftv5S
+            171hn6nE4hCGELhX0gEvaq/9vOi++c8QTQsJPhrPPz19N//cIcBWlA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1m7xhem3qll35d539f364pm6txexvnp6k0tk34d8jxu4ry3pptv7smm0k5n
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBySENvQlJsQUVYZWZZQjRt
-            amZoZmhKUGovN0g2TXE0dUN2Q3VDUFNHZkZjCnBEbXYrR043bCt2VHhDUXpMNWNl
-            dFY1RUZQOWMyYTVTV3J6aW1EczZqczgKLS0tIFBMNDE1VHV4L29BY0srUjhjeDJh
-            MTJMU1h4a25XNFMwaHc5ZmcrUDF0dEUKXvbzWqMeFFTTJZ5rScMxxOgE9rUGKGZK
-            MOGRa9yaAwUtvpGvB9Thw7MewCK6EfIfW3b9TBRG+6m7fvQYM2zOOA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHSWNPOXBSeGxWUXRDM2tl
+            OUY2T3g2MXdCc1E5NGljdDJkVEtxTU8yS1JRCkJaRjdGYUdJclVuSEMvTUZDQzhv
+            K3pPL053MTBZNm1jYk5KZWpXcHFjOFUKLS0tIFBEL0o0YXVVb3ZTRnR1c1JkMFhH
+            NHdPUk5OWnlxWllHZmJKVkF6VWZMOEkKLOp3GuszVag+8m516594WwIZLMAilpGr
+            HBchG4cbturlpwFLdEXfvOxoCWTYD2eRCBLcfefalvVmJkF6x04AAA==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1dzvjjum2p240qtdt2qcxpm7pl2s5w36mh4fs3q9dhhq0uezvdqaq9vrgfy
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKWHVPMFBxbHRFamEwYWdO
-            ZmpNdCtKQjhoZCtlcnRhYnpJNkxtVmFiSEI0CjhEOUJlN3R3TXFST0o3bHF0c2Na
-            OUFPdzY0VEI1YnMxdkIvSFRudXhjTDgKLS0tIE55NUhVdnNCbHJUVkliN2YvVk5w
-            YnVXaEZLalZmVk9qQUZUSU16QllOOGcKRsDQagZA9FAYayQUDdVr2Bq5UK9aaO2e
-            C5mQ7uWyiN3YWvD2UgulG1Q8wCZZKYCCZxmYK2OEb1/piPmD4jd5iQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0cmhKTnh1c3hVd252elFN
+            Mmw2VkZJSnVkUHlQU0ZCU001dHpkc2lHZmkwCkpvcHMzQ0kvbHBQMW4zN3d5Nllt
+            ZkpXRFZDSEdyU3ZIUHNCQ1g3K1RpREEKLS0tIG1yYU11Skh2SkduYW5Zd0lybXZq
+            OWp3ZTRDaUF5Q09ldGFSNExtNGZzaXMKEJyh5VWp+wMSTvBnILtWp41SNr2vcI69
+            WkjzSoPQ+sdXpyG5LR/8o13Uys8XnUisLd5zgu3u5gMoC27HHaMGWA==
             -----END AGE ENCRYPTED FILE-----
     lastmodified: "2023-04-11T22:25:24Z"
     mac: ENC[AES256_GCM,data:wW9ilTzHroIfRARpTFdWJTgeTVxc6ike59vik6+kWQ88LQ+FOEivRidcN6GBs11CZIrPZ0bdIdGoBAU3ITCBFT86kzZarXp5UA9gldsHHHy4AJGnf8AtS+xy2pttHHwcal8xG6xjMM9mON0GTsSZT1DUCWBXjTZgfO3Ffr6D8q0=,iv:3/CjqY8GoIzJXfhJcArxHeS+EFMWs7LrMDGeZIcl7MA=,tag:A0qqPDNYfMcivyTqNiA45g==,type:str]