feat(security): Re-encrypt secrets with final SOPS config

2025-08-31 01:07:39 +01:00
parent 300117822d
commit fbee4aed52
4 changed files with 22 additions and 29 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,4 +1,7 @@
 creation_rules:
-  - path_regex: ^envs/.*\.env$
-    # Ключи перечисляются ОДНОЙ СТРОКОЙ через запятую
-    age: age12dkajmj2n7cgqplt325aw89c63v9dq7e833rt4ceqwlh87xs6fcsz6xfc9,age1p69rx76d4dqpf5a54m66lptad5qks8r98vxyyd59hh7rwz203szq3hzgyz
+  - path_regex: ^envs/(prod|staging)\.env$
+    key_groups:
+      - age:
+          - age12dkajmj2n7cgqplt325aw89c63v9dq7e833rt4ceqwlh87xs6fcsz6xfc9
+          - age1p69rx76d4dqpf5a54m66lptad5qks8r98vxyyd59hh7rwz203szq3hzgyz
+    encrypted_regex: '^(?!#).*'