From 192e3f20658a4af5f7cc6d850984e862ef13eb5b Mon Sep 17 00:00:00 2001 From: Gabriel Arazas Date: Tue, 26 Jul 2022 19:58:09 +0800 Subject: [PATCH] docs: add section for secrets management --- README.adoc | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/README.adoc b/README.adoc index 936e8f1d..3dc6dd0d 100644 --- a/README.adoc +++ b/README.adoc @@ -147,6 +147,17 @@ It is exported in the flakes at `outputs.homeConfigurations`. For more information, see the link:./users/README.adoc[related documentation]. +=== Secrets management + +This repo uses link:https://github.com/mozilla/sops[sops] as the main secret management tool. +For integrating this into NixOS, I use link:https://github.com/Mic92/sops-nix[sops-nix]. + +To get started using sops, I recommend to take a look at `.sops.yaml` file which secrets belong to whom. +Then edit a secrets with `sops PATH_TO_SECRET`. +Take note, you need to respective keys to edit the secret in the first place. +If you edit `./secrets/backup-archive.yaml` for example, it needs one of the keys (either my age and GPG key or the age key from host `ni`). + + == TODO