check if reference exists in key group before adding, skip if it does

nixos/.sops.yaml

@@ -1,10 +1,8 @@
 keys:
   hosts:
     - &laptop age1ldgnl53dmvl4fjz6hgdj0cvensagddn3ltpmxfm72m8q273w75fsk42p8v
-    - &nixos-homelab-00 age1kc49egwnslqjjy7yknlv9spxa2xvrq4l6alxumu54ez8vwvf3e2q5ff63k
 creation_rules:
   - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
     key_groups:
       - age:
           - *laptop
-          - *nixos-homelab-00

nixos/script.sh

@@ -27,9 +27,13 @@ function sops_update_age_key() {
 function sops_add_host_to_key_groups() {
 	h="\"$1\""                    # quoted hostname for yaml
   
+  if [[  -z $(yq "select(.creation_rules[].key_groups[].age[] == $h)" "$SOPS_FILE") ]]; then
     echo "Adding key to key group"
     yq -i ".creation_rules[].key_groups[].age += [ $h ]" "$SOPS_FILE"
     yq -i ".creation_rules[].key_groups[].age[-1] alias = $h" "$SOPS_FILE"
+  else
+    echo "Reference already exists in key group"
+  fi
 }
 
 # Use generated ssh key generate age key, and update sops