From 52ff370ea01aae7c9bbfeff957c57bf4a9b7f161 Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes@tower.local>
Date: Mon, 19 Oct 2026 02:07:19 -0400
Subject: [PATCH] chore(sops): creation_rules des nouveaux secrets

Regles pour secrets/monero.yml (tower + deck), stalwart-mcp.yml,
wireguard.yml, zitadel-smtp.yml et wise.yml (recipient tower).
---
 .sops.yaml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/.sops.yaml b/.sops.yaml
index 935b47c..1d0e12a 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -5,6 +5,11 @@ keys:
   - &deck age154uz4pavaj5qth25ytj0q8chsya4y65pgel04zcrm02je9w6uc9sug7dp2
 
 creation_rules:
+  - path_regex: secrets/monero\.yml$
+    key_groups:
+      - age:
+          - *tower
+          - *deck
   - path_regex: secrets/common\.yml$
     key_groups:
       - age:
@@ -12,6 +17,10 @@ creation_rules:
           - *tower
           - *mac
           - *deck
+  - path_regex: secrets/stalwart-mcp\.yml$
+    key_groups:
+      - age:
+          - *tower
   - path_regex: secrets/hermes_api_server_env\.yml$
     key_groups:
       - age:
@@ -24,6 +33,10 @@ creation_rules:
     key_groups:
       - age:
           - *anywhere
+  - path_regex: secrets/wireguard\.yml$
+    key_groups:
+      - age:
+          - *tower
   - path_regex: secrets/tower\.yml$
     key_groups:
       - age:
@@ -36,6 +49,10 @@ creation_rules:
     key_groups:
       - age:
           - *tower
+  - path_regex: secrets/zitadel-smtp\.yml$
+    key_groups:
+      - age:
+          - *tower
   - path_regex: secrets/hermes-matrix\.yml$
     key_groups:
       - age:
@@ -96,3 +113,7 @@ creation_rules:
     key_groups:
       - age:
           - *tower
+  - path_regex: secrets/wise\.yml$
+    key_groups:
+      - age:
+          - *tower