skill-manage-agenix

You can manage encrypted secrets across multiple Nix hosts by using agenix to add, rotate, or modify secret values. It enforces safety rules and uses public keys to control per-host access.

Agenix handles secret encryption by using public keys to determine per-host access groups and patterns. This ensures that only authorized hosts can decrypt and access specific secret values.

You bind agenix secrets to consuming services by integrating with Nix module secrets registration. This enforces correct file ownership, group assignments, and permissions for the decrypted data.

Yes, you can rotate existing encrypted secrets without exposing plaintext. Agenix allows you to add new encrypted secrets and re-encrypt data safely while modifying secret values.

Yes, this secret management approach enforces correct file permissions. It integrates with Nix module secrets registration to enforce proper ownership, group, and permissions for your services.

Agenix is specifically designed for Nix environments and requires managing public keys for per-host access. Users must follow its enforced safety rules when adding, rotating, or modifying secret values across systems.