add sops, add nb-epicenter, add readme

.sops.yaml

@@ -0,0 +1,83 @@
+# This example uses YAML anchors which allows reuse of multiple keys 
+# without having to repeat yourself.
+# Also see https://github.com/Mic92/dotfiles/blob/master/nixos/.sops.yaml
+# for a more complex example.
+keys:
+  - &dominik age16veg3fmvpfm7a89a9fc8dvvsxmsthlm70nfxqspr6t8vnf9wkcwsvdq38d
+  - &tuxedo age17c4swm58zt07axl5u6kkxrwtr5haqkvu4ye4t98qdph98qdclgtq2cyzkq
+  - &git-server age106n5n3rrrss45eqqzz8pq90la3kqdtnw63uw0sfa2mahk5xpe30sxs5x58
+  - &web-01-server age1y6lvl5jkwc47p5ae9yz9j9kuwhy7rtttua5xhygrgmr7ehd49svsszyt42
+  - &home-assistant-server age1ezq2j34qngky22enhnslx6hzh4ekwk8dtmn6c9us0uqxqpn7hgpsspjz58
+  - &ldap-server-test age1azmxsw5llmp2nnsv3yc2l8paelmq9rfepxd8jvmswgsmax0qyyxqdnsc7t
+  - &testmodules age1zkzpnfeakyvg3fqtyay32sushjx2hqe28y6hs6ss7plemzqjqa5s6s5yu3
+  - &ldap-server-arm age1jyeppc8yl2twnv8fwcewutd5gjewnxl59lmhev6ygds9qel8zf8syt7zz4
+  - &netboot age14uarclad0ty5supc8ep09793xrnwkv8a4h9j0fq8d8lc92n2dadqkf64vw
+creation_rules:
+  - path_regex: ^[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *tuxedo
+      - *dominik
+  - path_regex: computers/git.cloonar.com/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *dominik
+      - *git-server
+  - path_regex: computers/web-01.cloonar.com/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *dominik
+      - *web-01-server
+  - path_regex: computers/home-assistant.cloonar.com/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *dominik
+      - *home-assistant-server
+  - path_regex: computers/ldap.cloonar.com/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *dominik
+      - *ldap-server-arm
+      - *ldap-server-test
+  - path_regex: modules/lego/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *dominik
+      - *git-server
+      - *web-01-server
+      - *home-assistant-server
+      - *ldap-server-arm
+      - *ldap-server-test
+      - *testmodules
+      - *netboot
+  - path_regex: modules/bitwarden/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *dominik
+      - *web-01-server
+  - path_regex: modules/drone/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *dominik
+      - *git-server
+  - path_regex: modules/zammad/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *dominik
+      - *web-01-server
+  - path_regex: modules/plausible/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *dominik
+      - *web-01-server
+  - path_regex: modules/openldap/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *dominik
+      - *ldap-server-arm
+      - *ldap-server-test
+  - path_regex: modules/home-assistant/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *dominik
+      - *home-assistant-server