Skip to content

Commit

Permalink
+
Browse files Browse the repository at this point in the history
  • Loading branch information
oluceps committed Nov 17, 2024
1 parent bbe0b5f commit e4338f9
Showing 1 changed file with 17 additions and 7 deletions.
24 changes: 17 additions & 7 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,13 +10,17 @@

Secret management for NixOS.

This project is highly inspired by [agenix-rekey](https://github.com/oddlama/agenix-rekey) and [sops-nix](https://github.com/Mic92/sops-nix). Based on rust [age](https://docs.rs/age/latest/age) crate.

+ Age Plugin Compatible
+ Support Template
+ Support identity with passphrase
+ Support PIV Card (Yubikey)
+ No Bash
This project is highly inspired by [agenix-rekey](https://github.com/oddlama/agenix-rekey) and [sops-nix](https://github.com/Mic92/sops-nix).

+ Based on age rust [implemention](https://docs.rs/age/latest/age)
+ Support secure identity with passphrase
+ Support template for reusing insensitive stanza
+ Support Yubikey PIV with [age-yubikey-plugin](https://github.com/str4d/age-plugin-yubikey)
+ Small binary size (less than 1.5M[^1])
+ Fits well with new `sysuser` nixos userborn machenism[^2]
+ Design with [flake-parts](https://flake.parts/) with better user experience
+ Written in Rust for speed, safety, and simplicity
+ Compatible and tested with known[^3] nixos deployment tools

## Setup

Expand All @@ -31,3 +35,9 @@ See [TODO](./TODO.md)
+ [agenix](https://github.com/ryantm/agenix)
+ [agenix-rekey](https://github.com/oddlama/agenix-rekey)
+ [sops-nix](https://github.com/Mic92/sops-nix)



[^1] nix build result on Nov 18 2024, 1357112 bytes.
[^2] See merged pr [270727](https://github.com/NixOS/nixpkgs/pull/270727) and [332719](https://github.com/NixOS/nixpkgs/pull/332719)
[^3] nixos-rebuild, apply, colmena was confirmed supported

0 comments on commit e4338f9

Please sign in to comment.