mirror of
https://github.com/ryantm/agenix.git
synced 2024-09-11 06:05:38 +03:00
add notice about root-owned secrets
This commit is contained in:
parent
0650e51720
commit
fbd9e29ac9
@ -17,6 +17,10 @@ All files in the Nix store are readable by any system user, so it is not a suita
|
||||
* Very little code, so it should be easy for you to audit
|
||||
* Encrypted secrets are stored in the Nix store, so a separate distribution mechanism is not necessary
|
||||
|
||||
## Notices
|
||||
|
||||
* If you want to manage user's hashed passwords, you must use a version of NixOS with [commit e6b8587](https://github.com/NixOS/nixpkgs/commit/e6b8587b25a19528695c5c270e6ff1c209705c31), so the root-owned secrets can be decrypted before the user activation script runs. Currently only available on `unstable`.
|
||||
|
||||
## Installation
|
||||
|
||||
Choose one of the following methods:
|
||||
|
Loading…
Reference in New Issue
Block a user