search

rpdav / nixos

MIT License
0 stars 0 forks source link

Replace secrets.json with flake #2

Open rpdav opened 4 days ago

rpdav commented 4 days ago

Description Secrets used to be managed with a secrets.json file in this repo, unencrypted on disk but encrypted with git-crypt when pushed to a remote. They're now in a private repo, mostly managed using sops, although some have to stay in secrets.json in cleartext. Git-crypt is no longer used since it must be in cleartext on the remote in order to pull it in as a flake input.

Steps taken EmergentMind's repo does something like this, but I haven't been able to get it working so far.

rpdav commented 4 days ago

Flake input was set to flake = "false" - that's probably why it didn't work.