I know NixOps has a way to handle keys without putting them in the store and without having to do some out-of-band file management: https://nixops.readthedocs.

I know NixOps has a way to handle keys without putting them in the store and without having to do some out-of-band file management: https://nixops.readthedocs.io/en/latest/overview.html#managing-keys https://nixops.readthedocs.io/en/latest/overview.html#managi...