NateDevCSharp@alien.topBtoNix@lemmy.nix-community.org•Handling Secrets in NixOS: An Overview (git-crypt, agenix, sops-nix, and when to use them)English
1·
1 year agoIsn’t sops / agenix basically the same thing except instead of you manually putting the secret in foo/secret it’s stored encrypted in the Git repo and then it automatically decrypts it at execution time into /var/wherever?
Not a solution, but they’re working on not requiring flakes to copy the whole source directory to the store.