chvp/nixos-config
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Remove all git-crypt

Browse source
This commit is contained in:
Charlotte Van Petegem 2021-09-16 15:24:35 +02:00
parent 22836a44d7
commit 97409f47e4
No known key found for this signature in database
GPG key ID: 019E764B7184435A
19 changed files with 86 additions and 47 deletions
Download patch file Download diff file Expand all files Collapse all files

10
README.md
View file

@ -2,19 +2,11 @@
## Secrets
There are two types of secrets in this repository. Secret secrets, and
secret configuration.
Secret secrets should never be world-readable, even to users who are
Secrets should never be world-readable, even to users who are
logged in to one of the hosts managed by this configuration. These are
generally managed by agenix, allowing them to still be put in the nix
store.
Secret configuration is generally more security through obscurity
(e.g. some services that I run that I don't want the whole world to
know what ports they run on). These are managed with git-crypt and are
files that end in `secret.nix`.
## Setting up a new dev environment
* Create a new `*.nix` file in the shells directory that describes the environment (this is the hard part).