Here's a small sneak peek: I'm about to dive into the... | Alex M

Alex's posts Post Back to profile

Here's a small sneak peek:
I'm about to dive into the cave of despair, hoping to came out with a series of blog posts documenting my journey in managing secrets for my NixOS fleet. Not gonna lie, I almost gave up. But I took my Ritalin and managed to get a decent workflow.

Screenshot of an Org file with a header suitable for blog post and next text:

#+TITLE: Managing secrets in NixOS. Intro
#+DATE: <2024-11-12 Tue>
#+DESCRIPTION: How to manage secrets in your Nix fleet and stay sane
#+PUBLISHED: false
#+TAGS: @nix @sops @age @gpg @yubikey
* Secrets, NixOS and All, All, All
** Digression
I consider myself a pretty fortunate when it comes to working with open-source software.
Most GNU/Linux distros work well for me, and almost all my hardware functions even with open drivers.
I prefer using software distributed under permissive licenses, and it usually pays off.

But recently, I made a mistake and found myself on the slippery slope of secret management,
dealing with GnuPG, SOPS, a frustrating chicken-and-egg dilemma, and unmet expectations.

Like 12 November at 20:57 | Open on mastodon.social

No comments