!XLCFfvFhUkYwOMLbVx:nixos.org

agenix

365 Members
age-encrypted secrets for NixOS https://github.com/ryantm/agenix/96 Servers

Load older messages


SenderMessageTime
13 May 2023
@kranzes:matrix.orgIlan Joselevich (Kranzes)Between HM and NixOS module 11:54:13
15 May 2023
@j0lol:the-apothecary.clubj0 changed their profile picture.10:41:32
@boozedog:matrix.orgDavid A. Buser (boozedog)

hi! i am trying out the tutorial from agenix and running into a problem:
when I get to step 4, i get an error:

agenix -e ./secret1.age
error: attribute './secret1.age' missing
14:58:50
@kranzes:matrix.orgIlan Joselevich (Kranzes)The UX isn't great in that regard, you need to first add the secret to the secrets.nix file15:00:10
@boozedog:matrix.orgDavid A. Buser (boozedog)

i think it's there, based on the tutorial i have this:

  "secret1.age".publicKeys = [ myuser myhost ];
15:01:13
@boozedog:matrix.orgDavid A. Buser (boozedog)(added in step 3 of tutorial https://github.com/ryantm/agenix#tutorial )15:02:39
@boozedog:matrix.orgDavid A. Buser (boozedog)OK I must've messed up my secrets.nix file b/c now it's working!18:39:55
@boozedog:matrix.orgDavid A. Buser (boozedog) next question ... is it possible to encrypt a value directly into my nix config and access the value via config. ? I have a value that I don't want to put directly into git, but i want to reference it in my nginx config. some other tool perhaps? 18:41:14
@cole-h:matrix.orgcole-hAs far as I know, no. You'll need to direct nginx to read the decrypted file.18:41:52
@boozedog:matrix.orgDavid A. Buser (boozedog)use case is a Slack webhook, i don't want to publish the webhook URL directly in a git repo, but I do want nginx to proxy to that URL18:42:50
@cole-h:matrix.orgcole-h nginx supports an include so you might be able to make the secret into a valid nginx config and then include the path of the decrypted secret. 18:43:57
@cole-h:matrix.orgcole-h * nginx supports an include directive so you might be able to make the secret into a valid nginx config and then include the path of the decrypted secret. 18:44:03
@boozedog:matrix.orgDavid A. Buser (boozedog)nice, i will take a look at that.18:44:12
@cole-h:matrix.orgcole-hhttps://nginx.org/en/docs/ngx_core_module.html#include18:44:18
@boozedog:matrix.orgDavid A. Buser (boozedog)appreciate the help!18:44:32
21 May 2023
@ctx:kungfu-g.ripREASON...UNKNOWN is there some way to splat the contents of a file into a new secret without actual copy&paste? maybe by setting EDITOR appropriately? ive tried a dozen things but cant get it 02:16:58
@eisfunke:eisfunke.comNicolas Lenz
In reply to @ctx:kungfu-g.rip
is there some way to splat the contents of a file into a new secret without actual copy&paste? maybe by setting EDITOR appropriately? ive tried a dozen things but cant get it
agenix -d input.age | EDITOR=cat agenix -e output.age using pipes seems to work for me (given that both input.age and output.age are defined in secrets.age)
13:20:43
27 May 2023
@mjolnir:nixos.orgNixOS Moderation Botchanged room power levels.16:40:19
30 May 2023
@vlashada:matrix.orgvlashada joined the room.22:34:05
@vlashada:matrix.orgvlashadaWhat is the purpose of agenix? Can I use it to add ssh keys and password store to my dotfiles git repo?22:36:06
@vlashada:matrix.orgvlashada * What is the purpose of agenix? Can I use it to add ssh keys and password store to my dotfiles git repo? Can I add the file secrets.nix and for instance my-server.pub.age and my-server.age files to a folder inside my git repo?22:41:55
31 May 2023
@ryantm:matrix.orgryantmThe purpose is to deliver secrets to NixOS machines in a secure and ergonomic manner.00:02:50
1 Jun 2023
@raphi:tapesoftware.netraphi changed their display name from raphi to raphi (element unread channel fix when).13:03:19
2 Jun 2023
@lukas:luflosi.deLukas joined the room.22:54:26
3 Jun 2023
@sammulat:matrix.orgSecirian left the room.11:06:42
@noonien:matrix.orgnoonien left the room.20:17:20
4 Jun 2023
@federicodschonborn:matrix.orgFederico Damián Schonborn changed their profile picture.17:40:30
@ruination:matrix.orgFaust joined the room.21:25:19
7 Jun 2023
@nebucatnetzer13:matrix.orgnebucatnetzer13 joined the room.21:47:00
8 Jun 2023
@bjrnmrtns:matrix.orgbjrnmrtns joined the room.19:12:59

Show newer messages


Back to Room ListRoom Version: 6