fix: update sops configuration file

Allow encrypted files to be edited and adjust YAML indentation to two.
onedr0p · Jan 8, 2025 · 8e12733 · 8e12733
1 parent 615550e
commit 8e12733
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/templates/config/.sops.yaml.j2 b/templates/config/.sops.yaml.j2
@@ -2,11 +2,16 @@
 creation_rules:
   - # IMPORTANT: This rule MUST be above the others
     path_regex: talos/.*\.sops\.ya?ml
+    mac_only_encrypted: true
     key_groups:
       - age:
           - "#{ age_pubkey }#"
   - path_regex: kubernetes/.*\.sops\.ya?ml
     encrypted_regex: "^(data|stringData)$"
+    mac_only_encrypted: true
     key_groups:
       - age:
           - "#{ age_pubkey }#"
+stores:
+  yaml:
+    indent: 2