this post was submitted on 02 Apr 2024
17 points (100.0% liked)

Nix / NixOS

1524 readers
51 users here now

Main links

Videos

founded 1 year ago
MODERATORS
top 5 comments
sorted by: hot top controversial new old
[–] [email protected] 4 points 3 months ago (1 children)

What does this do vs just using SOPS?

[–] [email protected] 1 points 3 months ago (1 children)

It looks to me like a way to declaratively install your ssh keys which from what I'm reading sops doesn't appear to do

Am I wrong in taking the conclusion SOPS stores that stuff encrypted at rest, and the only way to use them is either through the SOPS cli, or through whatever tool that wants the secrets implementing their library?

[–] [email protected] 1 points 3 months ago (1 children)

Sops-nix decrypts secrets at runtime and allows you to create symlinks to the secret files (/run/secret.d...) so this could be used for ssh keys AFAIK.

[–] [email protected] 1 points 3 months ago

Ah right didn't realise there was a nix version of it, will have a look

[–] [email protected] 3 points 3 months ago

Looks cool, but why use yaml? I never understand why people choose to use yaml as their configuration format