divnix/digga
1
1
Fork 0
mirror of https://github.com/divnix/digga.git synced 2024-12-26 01:26:23 +03:00
Code Issues Projects Releases Wiki Activity
f873446787
digga/secrets
History
Timothy DeHerrera 8939c3401b
project rename: nixflk -> devos
2021-02-17 18:31:33 -07:00
..
.gitattributes doc: new mdbook documentation 2021-02-14 02:46:05 -07:00
README.md project rename: nixflk -> devos 2021-02-17 18:31:33 -07:00

README.md

Secrets

Secrets are managed using git-crypt so you can keep your flake in a public repository like GitHub without exposing your password or other sensitive data.

By default, everything in the secrets folder is automatically encrypted. Just be sure to run git-crypt init before putting anything in here.

Note:

Currently, there is no mechanism in nix to deploy secrets within the nix/store so, if they end up in the nix/store after deployment, they will be world readable on that machine.

The author of devos intends to implement a workaround for this situation in the near future, but for the time being, simple be aware of this.