Understanding nixos secrets management/aws configuration

• colmena

  7 975 7.1 Rust

  A simple, stateless NixOS deployment tool

Answering your broader question (secret management) colmena does that for me outside the Nix store. I also use git-crypt to store secrets in the repo. There are also more Nix-y alternatives like agenix.

• agenix

  10 1,241 7.3 Nix

  age-encrypted secrets for NixOS and Home manager

Answering your broader question (secret management) colmena does that for me outside the Nix store. I also use git-crypt to store secrets in the repo. There are also more Nix-y alternatives like agenix.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• aws-vault

  49 8,153 1.7 Go

  A vault for securely storing and accessing AWS credentials in development environments

  

For other secrets i use sops-nix. But for aws keys, I use https://github.com/99designs/aws-vault with https://www.passwordstore.org/ backend. So then aws keys are handled the same place as passwords. Just clone it to ~/.passwordstore.

• pass-import

  403 772 8.4 Python

  A pass extension for importing data from most existing password managers

For other secrets i use sops-nix. But for aws keys, I use https://github.com/99designs/aws-vault with https://www.passwordstore.org/ backend. So then aws keys are handled the same place as passwords. Just clone it to ~/.passwordstore.

Suggest a related project