skills.rest
kressnerd
kressnerdCOMMUNITY
Explore all skills by this author →
GitHub

SOPS Secrets Management

Decrypt and manage sops-nix secrets for NixOS and macOS deployments.

2|Updated Jul 22, 2025
Search Tags:#encryption#nixos#sops-nix#secret-management#age-keys#secret-life-cycle
One-click install
npx skills add https://github.com/kressnerd/nix-config --skill sops-secrets-management
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: SOPS Secrets Management
Source: https://github.com/kressnerd/nix-config/tree/main/.claude/skills/sops-secrets
Command: npx skills add https://github.com/kressnerd/nix-config --skill sops-secrets-management

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides deep expertise in managing sops-nix secrets, enabling secure encryption, per-host access, and automated decryption during activation.

Core Features & Use Cases

  • Centralized configuration for .sops.yaml, age key management, and host-specific secrets.
  • Automated decryption at activation and secure secret provisioning in /run/secrets/.
  • Key rotation and secure secret lifecycle management across NixOS and macOS deployments.

Quick Start

Create or edit a host's secrets with sops and apply changes by rebuilding the host configuration.

Frequently Asked Questions about SOPS Secrets Management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage sops-nix secrets for multiple NixOS hosts?▼

To manage sops-nix secrets for multiple NixOS hosts, configure a .sops.yaml file with per-host creation rules and age keys to control access. This enables centralized, host-specific encryption and secure secret delivery during system activation.

How does sops-nix secret decryption work during NixOS activation?▼

During NixOS activation, sops-nix decrypts secrets using age keys and places them securely under /run/secrets/. This ensures decrypted secrets are only available to the specific host during its activation process.

Can I use sops-nix for macOS deployments and secret management?▼

Yes, sops-nix supports macOS deployments alongside NixOS for secure secret management. You can manage centralized configurations, age key management, and host-specific secrets across both operating systems.

What is the best way to rotate age keys in a sops-nix configuration?▼

The best way to rotate age keys in a sops-nix configuration is through the skill's automated key rotation lifecycle management. This updates per-host access rules in your .sops.yaml while maintaining secure secret delivery.

Do I need a .sops.yaml file to manage per-host secrets with sops-nix?▼

Yes, a .sops.yaml file is required to manage per-host secrets with sops-nix. It defines the creation rules and age keys necessary for secure encryption, automated decryption, and host-specific access control.

Related Skills

Explore More Software Engineering Skills→
nq-rdlnq-rdl

sops

Encrypt and decrypt YAML, JSON, ENV, and INI secrets with SOPS.

Official
Advanced
ChanningHeChanningHe

nix-config

Manage modular NixOS and macOS configurations with a three-file pattern.

Community
Intermediate
olafkfreundolafkfreund
21

agenix

Encrypt and decrypt NixOS secrets with age and SSH keys.

Community
Advanced
ancolemanancoleman
503

managing-secrets

Manage API keys, database credentials, and certificates with HashiCorp Vault.

Community
Advanced