Handling Secrets in NixOS: An Overview
lgug2z.com
There are a number of different approaches available for NixOS users to handle secrets. The most popular tend to be git-crypt, agenix and sops-nix. But which one should you use? To hopefully help you in answering this question for yourself, here is an overview of a few common use cases and what I think is most appropriate for each. Managing Your Own Physical Machines Maybe you have a desktop, a Macbook and a Raspberry Pi which you are managing from a single NixOS flake repo.

Someone on another website asked me whether it makes sense to use agenix or sops-nix to encrypt secrets for NixOS configurations.

I realized that I hadn’t seen a good overview article of the different approaches to secret handling in NixOS and when each one is appropriate to use, so I put down all of my knowledge and opinions in this post 🤞

  • @[email protected]BEnglish
    3•1 year ago

    Here are some possibly related communities in the instance:

    Feel free to crosspost into them or post future content on this topic there if they are relevant.
    I am a bot and this was performed automatically 🤖 For any issues contact Ategon.