3 ms·
Huh, I guess I was woefully behind on changes to nixos-rebuild. Thanks for the pointer, I will check it out
by VTimofeenko 4y ago
Huh, I guess I was woefully behind on changes to nixos-rebuild. Thanks for the pointer, I will check it out
- yencabulator 4y agoOne thing nixos-rebuild doesn't get you is a secrets transmission mechanism. I've been dabbling to build something independent of NixOS/Nix that would still do that neatly...
- VTimofeenko 4y agoMay I suggest agenix? It dovetails into my deploy-rs flake setup very nicely and I can track the encrypted secrets in the flake repo. I keep the "master" key encrypted in pass passing it in a zsh's "=" subshell to agenix.