Secrets Management

[aspauldingcode]

Figure out how to declarative define passwords, APIs, logins, identities, etc. without sharing that with the world

[aspauldingcode]

Use agenix.
I've installed to flake.nix.

Reference Secrets in Configuration: Use the decrypted secret paths in your NixOS configuration where needed. For example, to set a user's password from a secret:

   {
     users.users.alex = {
       isNormalUser = true;
       passwordFile = config.age.secrets.secret1.path;
     };
   }