# SOPS encryption policy for inter-hub production handoff files.
# Encrypt any file ending in .sops.yaml with the shared Railiance age recipient.

creation_rules:
  - path_regex: \.sops\.yaml$
    key_groups:
      - age:
          - age1aq8twfd78wvpra0had8cezcnj96tj4q0068edrz5jez8d6xwmflqdepsh4