Manage sensitive environment variables and credentials for Kamal deployments.
npx skills add https://github.com/donnfelker/kamal-skills --skill secrets-donnfelker
Please help me install this Agent Skill. Skill: secrets Source: https://github.com/donnfelker/kamal-skills/tree/main/skills/secrets Command: npx skills add https://github.com/donnfelker/kamal-skills --skill secrets-donnfelker
This skill solves the challenge of managing sensitive deployment credentials by providing a secure, standardized way to reference secrets from password managers or environment variables without ever committing plaintext values to version control.
Use the secrets skill to fetch my registry password from 1Password and configure it for my current Kamal deployment.
High-intent search queries and answers about installing and using this skill.
Inject Kamal deployment secrets by integrating with external password managers like 1Password, Bitwarden, or AWS Secrets Manager. This prevents plaintext credentials from entering version control by fetching values dynamically during execution and substituting them into config/deploy.yml.
Yes, you can pull secrets from 1Password or Bitwarden directly into Kamal. The skill provides a unified command interface to fetch credentials from these vaults and wire them into config/deploy.yml using dotenv-based workflows.
Use multi-environment secret scoping to manage database passwords across different Kamal deployment targets. This feature maps specific credentials from your vault to distinct environments, ensuring each target uses the correct rotated secrets during execution.
Yes, this approach supports fetching credentials from AWS Secrets Manager for Kamal deployments. It integrates with AWS Secrets Manager alongside other providers like 1Password and Bitwarden to automate secret extraction and injection into your deployment configuration.
Rotate registry credentials without manual config file updates by referencing the latest values directly from your password manager. The skill fetches updated secrets during the Kamal deployment process and automatically injects them into config/deploy.yml through command substitution.
rmanzokuAutomate managing secret-backed files in 1Password with opmaterialize.
bastosAutomate Rails application deployment with Kamal commands and configuration.
donnfelkerMigrate Kamal 1.x deployment configurations to Kamal 2.0 standards.
ancolemanManage API keys, database credentials, and certificates with HashiCorp Vault.
