keys:
  # Replace with your age public key (from age-keygen)
  # Example: age1qyqszq...
  - &vps age1__REPLACE_WITH_YOUR_AGE_PUBLIC_KEY__

creation_rules:
  - path_regex: secrets/[^/]+\.yaml$
    key_groups:
    - age:
      - *vps