Key less peerix - Githubissues

cid-chan / peerix

Peer2Peer Nix-Binary-Cache

GNU General Public License v3.0

139 stars 13 forks source link

Key less peerix #29

Open leiserfg opened 2 weeks ago

leiserfg commented 2 weeks ago

I know that it's not advisable, but given that:

my config is public (so I can't put keys there)
I use flake ( so the key files have to be in the repo)
I only update nix stuff in trusted networks (home)

I would like to be able to use peerix without keys so I can avoid having to download/compile packages multiple times at home (many nixos users with many devices and very similar hardware).

VolodiaPG commented 2 weeks ago

Hello, For managing secret files, it is advisable, especially in nix where nix can leak secrets in the derivation store, to use a secret manager such as https://github.com/Mic92/sops-nix or https://github.com/ryantm/agenix. That's the limit of my knowledge.