skills.rest
codgician
codgicianCOMMUNITY
Explore all skills by this author →
Website𝕏@codgicianGitHub

fact-secrets

Organize Agenix secrets domain knowledge with YAML frontmatter and Markdown guidance.

14|3|Updated Jul 23, 2023
Search Tags:#encryption#nix#secrets#secret-management#agenix#access-groups#pubkeys
One-click install
npx skills add https://github.com/codgician/serenitea-pot --skill fact-secrets
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fact-secrets
Source: https://github.com/codgician/serenitea-pot/tree/main/.opencode/skills/fact-secrets
Command: npx skills add https://github.com/codgician/serenitea-pot --skill fact-secrets

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Secrets domain knowledge helps teams standardize how Agenix manages secret definitions, access groups, and runtime decryption patterns across services.

Core Features & Use Cases

  • Directory Layout and Secrets Format: documents how secrets are stored and accessed (secrets.nix, pubkeys.nix, *.age files).
  • Access Groups and Security Model: defines groups like allHosts, allServers, privateServers, publicServers, and someHosts.
  • Practical Commands and Integration: demonstrates how to register secrets in config and reference them from services.
  • Use Case: Helps secure service credentials and environment-specific secrets in a reproducible, auditable manner.

Quick Start

Follow the guidance in this Skill to document how your secret definitions are organized and integrated into Nix-based deployments.

Frequently Asked Questions about fact-secrets

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How does Agenix manage secret storage formats and runtime decryption?▼

Agenix manages secret storage formats and runtime decryption by organizing definitions in secrets.nix, storing public keys in pubkeys.nix, and encrypting data into *.age files for secure service deployment.

How do I organize access groups for Nix secrets using Agenix?▼

You organize access groups for Nix secrets by defining access levels like allHosts, allServers, privateServers, publicServers, and someHosts to control runtime decryption permissions across targeted machines.

What is the standard directory layout for Agenix deployments?▼

The standard directory layout for Agenix deployments includes a secrets.nix file for definitions, a pubkeys.nix file for public key storage, and associated *.age files holding the encrypted secret payloads.

How do I register secrets in Nix config and reference them from services?▼

You register secrets in Nix config and reference them from services by mapping encrypted *.age files to defined access groups within secrets.nix, enabling secure runtime credential access for deployed services.

Does Agenix support reproducible and auditable secret management for Nix?▼

Agenix supports reproducible and auditable secret management for Nix by standardizing secret definitions and access groups, ensuring service credentials and environment-specific secrets remain securely deployed and traceable.

Related Skills

Explore More Software Engineering Skills→
olafkfreundolafkfreund
21

agenix

Encrypt and decrypt NixOS secrets with age and SSH keys.

Community
Advanced
johnnymo87johnnymo87
4

Managing Secrets

Automate secret encryption, decryption, rotation, and deployment in NixOS workflows.

Community
Advanced
lostitonce420-beeplostitonce420-beep

environment-secrets

View, set, delete, and request environment variables across shared, development, and production environments.

Community
Advanced
DaRacciDaRacci
18

secrets

Manage encrypted secrets with sops-nix and age for NixOS configurations.

Community
Advanced