!XLCFfvFhUkYwOMLbVx:nixos.org

agenix

323 Members
age-encrypted secrets for NixOS https://github.com/ryantm/agenix/93 Servers

Load older messages


SenderMessageTime
26 Dec 2024
@10leej:matrix.org@10leej:matrix.org left the room.01:41:59
@elikoga:matrix.orgelikoga changed their display name from elikoga to elikoga (@38c3 📞448{0,1}.15:21:48
@elikoga:matrix.orgelikoga changed their display name from elikoga (@38c3 📞448{0,1} to elikoga (@38c3 📞448{0,1}).15:26:03
@elikoga:matrix.orgelikoga changed their display name from elikoga (@38c3 📞448{0,1}) to elikoga (@38c3 📞488{0,1}).15:26:44
@tommy:datenkollektiv.netTommy changed their display name from Tommy to Tommy (3841).16:06:54
27 Dec 2024
@jeff:ocjtech.usJeff joined the room.21:16:19
28 Dec 2024
@0xcharly:matrix.org0xcharly joined the room.15:20:06
29 Dec 2024
@elikoga:matrix.orgelikoga changed their display name from elikoga (@38c3 📞488{0,1}) to elikoga (@38c3 📞488{0,1,9}).11:03:10
30 Dec 2024
@tommy:datenkollektiv.netTommy changed their display name from Tommy (3841) to Tommy.19:25:55
1 Jan 2025
@xoredg:matrix.orgxored joined the room.00:51:27
@xoredg:matrix.orgxored

hey guys i've a question, when using age to define a secret inside a home manager module, is there anything extra I need to do to have the secret available under the home agenix path? i have something like this in my home manager config:

programs.atuin = {
  enable = true;
  key_path = config.age.secrets.atuinKey.path;
}

age.secrets.atuinKey.file = inputs.self + /secrets/atuinKey.age;
00:55:24
@xoredg:matrix.orgxoredwhen I inspect $XDG_RUNTIME_DIR/agenix.d i don't see it there00:56:09
@xoredg:matrix.orgxoredif it helps my OS level secrets are working fine (under /run/agenix)00:58:36
@xoredg:matrix.orgxoredoh it turns out that's just my setup, i don't have my keys on home, they're saved on 1password, so the home module didn't seem to be able to decrypt the file01:28:10
@mjolnir:nixos.orgNixOS Moderation Botchanged room power levels.14:26:34
3 Jan 2025
@elikoga:matrix.orgelikoga changed their display name from elikoga (@38c3 📞488{0,1,9}) to elikoga.10:28:09
@willpower3309:matrix.orgwillmckinnonHey all! Interesting question here - how many private keys would need to be known to be able to determine what the other keys that a secret is encrypted with are? Lets say I had a secret encrypted to 3 different hosts' private keys, with the public keys of those hosts known. If someone figured out one of my host's private keys, could they then determine my other hosts' private keys given the knowledge of the secret and the public keys of those hosts?21:36:56
@k900:0upti.meK900
In reply to@willpower3309:matrix.org
Hey all! Interesting question here - how many private keys would need to be known to be able to determine what the other keys that a secret is encrypted with are? Lets say I had a secret encrypted to 3 different hosts' private keys, with the public keys of those hosts known. If someone figured out one of my host's private keys, could they then determine my other hosts' private keys given the knowledge of the secret and the public keys of those hosts?
No
21:52:16
4 Jan 2025
@philt3r:mozilla.orgphilt3r joined the room.16:05:14
6 Jan 2025
@jeroen:simonetti.nl@jeroen:simonetti.nl left the room.16:40:02
12 Jan 2025
@strutztm:strutztm.de@strutztm:strutztm.de joined the room.00:22:06
19 Jan 2025
@wiiplayer2:matrix.orgWaldemar Tomme (they/them) changed their display name from Waldemar Tomme to Waldemar Tomme (they/them).08:17:06
25 Jan 2025
@fwam:femdom.solutionsfwam changed their profile picture.04:32:11
28 Jan 2025
@fwam:femdom.solutionsfwam changed their profile picture.17:15:04
@howlymowly:matrix.orgThomas m changed their display name from howlymowly to Thomas m.19:26:50
3 Feb 2025
@cameronraysmith:matrix.orgcameronraysmith joined the room.05:06:26
@guhou:matrix.orgGus joined the room.06:05:32
@guhou:matrix.orgGus Anyone have good patterns for decrypting "secrets" for eval-time configuration? E.g. I want to set services.caddy.virtualHosts.foo.hostName = "foo.${myTailnet}". I don't care about myTailnet being in the nix store but I would prefer that it's not plaintext in my git repo 06:13:21
@guhou:matrix.orgGusI saw that maybe scalpel can solve this?06:13:42
@guhou:matrix.orgGuswondering if there is a straightforward way that people recommend :) 06:14:03

Show newer messages


Back to Room ListRoom Version: 6