keys:
  - &zimbatm 260353B993F8CE16752EF48C71BAF6D40C1D63D7
  - &mic92 age17n64ahe3wesh8l8lj0zylf4nljdmqn28hvqns2g7hgm9mdkhlsvsjuvkxz
  - &ryantm age1d87z3zqlv6ullnzyng8l722xzxwqr677csacf3zf3l28dau7avfs6pc7ay
  - &build01 age17jtyn2y4fpey6q7ers9gtnh4580xj89zdjuew9nqhxywmsaw94fs5udupc
  - &build02 age15wnv22clvrp4e744wpel7npta4namrru6gxmphq3kpm5zqxancxqtke630
  - &build03 age1qg7tfjwzp6dxwkw9vej6knkhdvqre3fu7ryzsdk5ggvtdx854ycqevlwnq
  - &build04 age1vr4suv4lhtt8f59s25eukdfk67j7av72gvj7sk7ux6thusct3utqmn3pmf
# scan new hosts like this:
# $ nix-shell -p ssh-to-age --run 'ssh-keyscan buildXX.nix-community.org | ssh-to-age'
creation_rules:
  - path_regex: build01/[^/]+\.yaml$
    key_groups:
    - age:
      - *mic92
      - *ryantm
      - *build01
      pgp:
      - *zimbatm
  - path_regex: build02/[^/]+\.yaml$
    key_groups:
    - age:
      - *mic92
      - *ryantm
      - *build02
      pgp:
      - *zimbatm
  - path_regex: build03/[^/]+\.yaml$
    key_groups:
    - age:
      - *mic92
      - *ryantm
      - *build03
      pgp:
      - *zimbatm
  - path_regex: build04/[^/]+\.yaml$
    key_groups:
    - age:
      - *mic92
      - *ryantm
      - *build04
      pgp:
      - *zimbatm
  - path_regex: roles/[^/]+\.yaml$
    key_groups:
    - age:
      - *mic92
      - *ryantm
      - *build01
      - *build02
      - *build03
      - *build04
      pgp:
      - *zimbatm