-
In the README.md on line 221 (sorry I'm on mobile and can't seem to find a way to add a link) an example .sops.yaml is linked in your dot files repo, but it doesn't exist anymore. Also it references t…
-
Hello! I really like your repo structure, I'm constantly visiting it.
I decided to try sops-nix to manage sensible stuff, and I'm curious: how do you handle the first installation? Keys need to be de…
-
From the description it is not clear what is needed on a running system to finally decrypt the secrets.
What exactly has to be set and how, if `/etc/ssh/ssh_host_ed25519_key` should be used for dec…
NobbZ updated
9 months ago
-
I currently see a few workarounds of the form `SOPS_AGE_KEY=$(…) sops …` floating around.
I would like to store my age key in my password manager, not have to specify a workaround each invocation a…
-
Rather than deploying this to an already running NixOS system, I was hoping to be able to build this into a pre-baked image that I could then deploy and boot.
Unfortunately, this doesn't seem to wo…
-
Since `/etc/ssh/` is on the tmpfs, the VM generates a new ssh key-pair every time is gets rebooted.
I tried to create a virtiofsd share for `/etc/ssh` to keep the keys on the host system, but that ma…
-
Over the past few weeks, I've been working on a replacement for the shell script `agenix` tool, written in Rust. I've published it at https://github.com/cole-h/agenix-rs/.
I really like how `sops-n…
-
Hey, I'm using your config as a template for my own but I have some submodules that have some secrets I want to encrypt within the file (and they must be available at runtime because it's being ran wi…
-
If the GPG private key used for decrypting secrets is missing, the boot just hangs after "setting up secrets". Is this intentional?
-
Without a module for home-manager, I am unable to fully replace `sops-nix` (or `agenix`) with `secrix`.
Would be nice if there was a flake output: `homeManagerModules.secrix` that defined options s…