encrypt-secret

Automate secret management with Infisical and Agenix in Nix setups.

8|1|Updated Oct 21, 2015
One-click install
npx skills add https://github.com/iamruinous/nix-config --skill encrypt-secret
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: encrypt-secret
Source: https://github.com/iamruinous/nix-config/tree/main/.opencode/skills/encrypt-secret
Command: npx skills add https://github.com/iamruinous/nix-config --skill encrypt-secret

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manage and rotate secrets across Infisical and legacy Agenix workflows within a Nix-based infrastructure, avoiding manual secret handling and drift.

Core Features & Use Cases

  • Infisical-based secret creation, rotation, and retrieval for cross-service, host, and service-scoped secrets.
  • Legacy Agenix workflow support for binary files and age-encrypted artifacts.
  • Guidance for Nix integration, including mkGenerator usage, rekey, and deployment steps.

Quick Start

Unlock your agenix identity, log in to Infisical, and create or update a secret using the recommended workflow.

Frequently Asked Questions about encrypt-secret

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage and rotate secrets across Nix configurations without manual drift?

You can automate secure secret management by integrating Infisical and Agenix workflows into your Nix configuration. This handles shared, service-specific, and host-specific secrets, preventing manual drift during rotation and deployment.

Can I use Infisical to manage service-specific and host-specific secrets in a Nix setup?

Yes, Infisical handles secret creation, rotation, and retrieval for cross-service, host-specific, and service-scoped secrets. It integrates with Nix configurations to automate deployment across multiple hosts.

What is the best way to handle legacy Agenix files alongside Infisical in Nix?

The best way is using a unified workflow that supports both Infisical and legacy Agenix files. This allows you to manage age-encrypted binary artifacts while integrating Infisical for new secret generation and rotation within your Nix setup.

Do I need the Infisical CLI and Agenix tooling to deploy secrets with mkGenerator?

Yes, you need the Infisical CLI and Agenix tooling to execute secret deployment with mkGenerator. These tools provide the necessary interfaces for generation, rekey, and deployment steps within your Nix configuration workflow.

How does mkGenerator integrate with secret management for Nix hosts?

mkGenerator integrates with secret management by automating the generation, rekey, and deployment steps for secrets across Nix hosts. It configures shared, service-specific, and host-specific secrets within a Blueprint-driven Nix setup.