b12f/os
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Remove git crypt, update docs

Browse source
This commit is contained in:
Benjamin Bädorf 2021-10-24 19:36:56 +02:00
parent 65db5d30ae
commit 243116e228
No known key found for this signature in database
GPG key ID: 4406E80E13CD656C
2 changed files with 1 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
doc/secrets.md
View file

@ -1,11 +1,8 @@
# Secrets # Secrets
Secrets are managed using [git-crypt][git-crypt] and [agenix][agenix] Secrets are managed using [agenix][agenix]
so you can keep your flake in a public repository like GitHub without so you can keep your flake in a public repository like GitHub without
exposing your password or other sensitive data. exposing your password or other sensitive data.
By default, everything in the secrets folder is automatically encrypted. Just
be sure to run `git-crypt init` before putting anything in here.
## Agenix ## Agenix
Currently, there is [no mechanism][secrets-issue] in nix itself to deploy secrets Currently, there is [no mechanism][secrets-issue] in nix itself to deploy secrets
within the nix store because it is world-readable. within the nix store because it is world-readable.
@ -104,7 +101,6 @@ secrets get decrypted. You can learn about them by looking at the
> You can take a look at the [agenix repository][agenix] for more information > You can take a look at the [agenix repository][agenix] for more information
> about the tool. > about the tool.
[git-crypt]: https://github.com/AGWA/git-crypt
[agenix]: https://github.com/ryantm/agenix [agenix]: https://github.com/ryantm/agenix
[age module]: https://github.com/ryantm/agenix/blob/master/modules/age.nix [age module]: https://github.com/ryantm/agenix/blob/master/modules/age.nix
[secrets-issue]: https://github.com/NixOS/nix/issues/8 [secrets-issue]: https://github.com/NixOS/nix/issues/8

4
shell/devos.nix
View file

@ -30,10 +30,6 @@ in
unset _PATH unset _PATH
''); '');
packages = with pkgs; [
git-crypt
];
commands = with pkgs; [ commands = with pkgs; [
(devos nixUnstable) (devos nixUnstable)
(devos agenix) (devos agenix)