skills.rest
89jobrien
89jobrienCOMMUNITY
Explore all skills by this author →
GitHub

secrets-management

Manage encrypted secrets and SSH credentials with age, sops, and 1Password CLI.

1|Updated Nov 25, 2025
Search Tags:#encryption#secrets#ssh#tailscale#sops#age#onepassword
One-click install
npx skills add https://github.com/89jobrien/dotfiles --skill secrets-management-89jobrien
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secrets-management
Source: https://github.com/89jobrien/dotfiles/tree/main/dot-claude/skills/secrets-management
Command: npx skills add https://github.com/89jobrien/dotfiles --skill secrets-management-89jobrien

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps securely manage encrypted secrets, SSH credentials, and remote access workflows by coordinating age, sops, 1Password, and Tailscale through a reproducible bootstrap.

Core Features & Use Cases

  • Secret encryption & decryption with age and sops to protect sensitive files at rest.
  • Credential management via 1Password CLI for SSH keys and infra tokens.
  • Remote access orchestration using Tailscale to reach machines securely.
  • Operational bootstrap loads infra configuration and auto-restores secrets during bootstrap.

Quick Start

Run the bootstrap to auto-restore secrets from 1Password and configure age keys for sops-based encryption.

Frequently Asked Questions about secrets-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage encrypted secrets and SSH credentials securely across machines?▼

You can manage encrypted secrets securely across machines by coordinating age, sops, 1Password CLI, and Tailscale. This orchestrates remote access and retrieves credentials during infrastructure bootstraps to ensure sensitive files remain protected at rest.

How do I set up sops and age for secret encryption at rest?▼

To set up sops and age, you need age keys stored at ~/.config/sops/age/keys.txt and a configured sops policy file named .sops.yaml. Running the bootstrap auto-restores secrets from 1Password and configures these keys for sops-based encryption.

Can I use 1Password CLI to retrieve SSH keys and infra tokens during bootstrap?▼

Yes, you can use the 1Password CLI (op) for item retrieval and backup of SSH keys and infrastructure tokens. The bootstrap process loads infra configuration and automatically restores secrets directly from 1Password.

What is the best way to rotate secrets and access remote machines using Tailscale?▼

The best way to rotate secrets and access remote machines is using Tailscale for remote access orchestration combined with sops for encryption. This routine secret rotation scenario coordinates 1Password for retrieval and age for cryptographic protection.

Do I need a configured .sops.yaml policy to decrypt secrets?▼

Yes, a configured .sops.yaml policy and age keys at ~/.config/sops/age/keys.txt are required to decrypt secrets. Without these prerequisites, the sops-based encryption and decryption workflows cannot securely protect sensitive files.

Related Skills

Explore More Software Engineering Skills→
RuanBuitendag42RuanBuitendag42

secrets-management

Encrypt and manage secrets in dotfiles with git-crypt, SOPS, age, and Bitwarden CLI.

Community
Advanced
89jobrien89jobrien
1

1password-tailscale

Coordinate 1Password credentials with Tailscale for SSH connections.

Community
Intermediate
chatermchaterm
50

ssh

Manage SSH connections, key generation, and secure tunneling.

Community
Intermediate
pratospratos
12

sops-secret-editor

Manage encrypted secrets in YAML files using SOPS and Age.

Community
Intermediate