-
If a systemd service depends on a secret, and agenix is managing that secret, it would be nice to restart the service on `nixos-rebuild switch`. Now, at the moment agenix has no way of knowing which s…
-
**Feature Proposed**
Allow reading `token` and `local_private_key` from separate files.
**Use Case**
Currently users have to choose between either storing the whole config file securely or ass…
-
It would be nice to be able to rekey a single secret -- just run across this while modifying the list of pubkeys that could access a single secret in a shared directory with other machines' secrets.
…
-
Lots of config options can be in a public GitHub repository but not everything.
For example, users and passwords for a Jellyfin config.
How do people handle automating secrets in NixOS?
-
### Describe the bug
autoUpgrade service doesn't fail when steps within the process have errors. nixos-rebuild seems to be swallowing them.
As well as simply not doing the intended job of upgrad…
-
Hey,
I will shortly explain a use case: I have two systems, each of them has two secrets. If I change the key for system A, I want to run rekey and only update the secrets that are affected by the …
-
## Issue description
Systemd supports [credential](https://systemd.io/CREDENTIALS/) which will place the credential in non-swappable memory, with access restriction, and supports encryption with TP…
-
```console
> agenix rekey
Collecting information about hosts. This may take a while...
error: builder for '/nix/store/2h1l7ahpvkf2gh5r7k4x8f0kvnflilb9-ageWrapper.drv' failed with exit code 1;
…
-
I put my flake.nix under `/etc/nixos`, as this is where the `sudo nixos-rebuild switch` default to. However, when I try to update the flake inputs by `nh os switch --update`, it successfully pulls the…
-
**Project description**
This is a python based API server and web configuration frontend for VU dials. VU dials can display custom metrics, like CPU usage, using a physical indicator moving in fron…