secret operations
- vault/openbao: too complicated
- vaultwarden + bitwarden: often have to update plugins, cli is poorly done, unofficial backend
- sops+age encryption: useful, but tricky when multi-machine and no sync process and auto-unlock of key material
- 1password: useful, but app has a thicc ass and really don't want to have to build this
after a while you try all these different solutions to solve one of your own problems. in this case having a cross-platform/multi-machine secrets/key material airgap/netgap was important to me for #security posture especially when running #kubernetes and various #linux and #freebsd machines
we live in an age ($current_year) where if you have a strong engineering foundation and some time you can crank out something specific to your usecase without having to fallback on opinionated architecture and/or systems.
crank up the #ai #llm and start something new today. i did, it's called sigil. want the saus? nope. not giving it up. if you're reading this you likely have your own money. go spend it.