Evaluation time secrets in Nix: Importing encrypted nix files

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

Dealing with secret values in NixOS is probably one of the first obstacles you come across when managing a NixOS-based server. In case you are not entirely familiar with the problem, the main issue is that any values part of a configuration file will inevitably end up in the nix store under /nix/store/<hash>... , and all of these paths are world-readable. However, there are different kinds of…

Read on oddlama.org ↗