dustinlyons / nixos-config

General purpose Nix configuration for macOS / NixOS with starter templates + step-by-step guides ✨
BSD 3-Clause "New" or "Revised" License
1.8k stars 113 forks source link

Store private keys and passwords #6

Closed dustinlyons closed 1 year ago

dustinlyons commented 2 years ago

Bring in declarative private keys, root passwords, etc. via a secrets module using simple .gitignore.

Example: adamlwgriffiths repo

dustinlyons commented 2 years ago

Use age: https://github.com/ryantm/agenix

dustinlyons commented 2 years ago

Example of age use: https://github.com/lovesegfault/nix-config/blob/master/hosts/jung/default.nix#L136

dustinlyons commented 1 year ago

Use sops-nix: https://github.com/Mic92/sops-nix

dustinlyons commented 1 year ago

Added secrets across SSH, PGP, and Syncthing with agenix.