How to force format in .sops.yaml ?

[mulder999]

I am trying to encrypt WireGuard configuration files (.conf) natively with SOPS without changing their file extensions to .ini.

I know I can achieve this via the CLI using the explicit --input-type ini --output-type ini flags, but I would love to declare this format mapping permanently inside my .sops.yaml configuration file so it happens automatically.

I tried multiple guesswork variations in my .sops.yaml, but the binary parser always kicks in when the file extension is .conf:

---
creation_rules:
  - path_regex: '.*\.(conf|ini)$'
    encrypted_regex: '^(PrivateKey|PresharedKey)$'

    input-type: ini
    output-type: ini
    input_type: ini
    output_type: ini
    format: ini
    parser: ini

[felixfontein]

Right now, you can't force it with .sops.yaml.

You cannot put random things in the config file and expect it to work. The format is documented here: https://getsops.io/docs/#config-file-format

[mulder999]

Thanks for answer.

SOPS doesn’t enforce the structure of .sops.yaml, so I threw in some random keys just to see whether it would eventually complain.