!XLCFfvFhUkYwOMLbVx:nixos.org

agenix

380 Members
age-encrypted secrets for NixOS https://github.com/ryantm/agenix/99 Servers

Load older messages


SenderMessageTime
10 Mar 2023
@cole-h:matrix.orgcole-h Otherwise you're creating a file named sync-secrets with the contents being the path to that secret file 21:46:59
@cole-h:matrix.orgcole-h And also .age at the end should probably be .path 21:47:25
@peter-lustig:matrix.orgpeter-lustigyep21:47:59
@peter-lustig:matrix.orgpeter-lustig What I wonder is what I need the SYNC_MASTER_SECRET for. Literally cannot find any explanation. 21:48:22
@cole-h:matrix.orgcole-hhttps://github.com/mozilla-services/syncstorage-rs/blob/f416d8a8c44c4c294f9403b40f136bda85bdd709/docs/config.md?plain=1#L1321:51:38
@cole-h:matrix.orgcole-hLooks like it's just something the sync server uses21:51:50
@peter-lustig:matrix.orgpeter-lustigOh, I thought I needed a 256-bit random key21:52:35
@cole-h:matrix.orgcole-hThat would probably be more secure21:53:12
@peter-lustig:matrix.orgpeter-lustig
In reply to @cole-h:matrix.org
That would probably be more secure
So all I need in the .age file is SYNC_MASTER_SECRET=something?
21:57:45
@cole-h:matrix.orgcole-hIn its decrypted contents; that's what I would believe.21:58:08
@peter-lustig:matrix.orgpeter-lustiglets see if this works22:00:47
@peter-lustig:matrix.orgpeter-lustigIt seems like everything worked perfectly fine :)22:13:09
@peter-lustig:matrix.orgpeter-lustigI assume the Master Secret is so only the server with that secret on it can use the syncserver22:22:37
11 Mar 2023
@peter-lustig:matrix.orgpeter-lustig I am generating a private key for wireguard with the following command: wg genkey > ~/wireguard-keys/private. I want to put the output of that command in an encrypted age file. How would I do that? 14:17:17
@ryantm:matrix.orgryantm peter-lustig: agenix supports piping clear text to a secret now! 14:35:50
@peter-lustig:matrix.orgpeter-lustig
In reply to @ryantm:matrix.org
peter-lustig: agenix supports piping clear text to a secret now!
how?
14:39:17
@ryantm:matrix.orgryantm peter-lustig: wg genkey | agenix -e secret name.age 15:36:30
@ryantm:matrix.orgryantm* peter-lustig: wg genkey | agenix -e secret_name.age15:36:56
12 Mar 2023
@peter-lustig:matrix.orgpeter-lustig ryantm: after setting my user and root password with agenix (followed the docs) and set mutableUsers = false in my nixos configuration, for some reason the passwords in the agenix file do not work to login. Any idea? 10:03:01
@peter-lustig:matrix.orgpeter-lustignevermind fixed problem13:47:05
14 Mar 2023
@whentze:matrix.orgWanja Hentze argh, my agenix -d feature is still buggy :( 17:42:12
@whentze:matrix.orgWanja HentzeI'm so sorry17:42:16
@whentze:matrix.orgWanja Hentze when writing to stdout, rage will eventually truncate: https://github.com/str4d/rage/blob/55e52c252b4036eb76582c84cbc5b9f6ef23c67f/age/src/cli_common/file_io.rs#L219 17:43:57
@whentze:matrix.orgWanja Hentze age doesn't seem to do the same so this was quite a surprise 17:44:16
@whentze:matrix.orgWanja HentzeJust opened https://github.com/ryantm/agenix/pull/175 with the fix18:03:28
@whentze:matrix.orgWanja Hentze (also, perhaps a hot take, but if your program cares a lot about the result of isatty, your program probably has bugs) 18:04:32
@cole-h:matrix.orgcole-hGood thing agenix-cli doesn't care about isatty (except for env_logger coloring) 😎18:06:28
@cole-h:matrix.orgcole-h(Taking a cursory look at that PR)18:06:42
@whentze:matrix.orgWanja Hentze
In reply to @cole-h:matrix.org
Good thing agenix-cli doesn't care about isatty (except for env_logger coloring) 😎
about that... https://github.com/ryantm/agenix/blob/main/pkgs/agenix.sh#L160
18:07:22
@cole-h:matrix.orgcole-hSorry, I was unclear. I'm talking about https://github.com/cole-h/agenix-cli :P18:07:46

Show newer messages


Back to Room ListRoom Version: 6