#sops — Public Fediverse posts

A month ago I wanted to switch to #Helix and immersed myself in #HomeManager, #Flakes, #sops-nix, and #colmena. Today, after a long redesign of my #NixOS module structure, I successfully applied colmena to the first test node. Twelve more will follow. This OS is wild.

A month ago I wanted to switch to #Helix and immersed myself in #HomeManager, #Flakes, #sops-nix, and #colmena. Today, after a long redesign of my #NixOS module structure, I successfully applied colmena to the first test node. Twelve more will follow. This OS is wild.

Blogged: Securing MCP Server connection credentials with SOPS

https://robert.muntea.nu/posts/securing-credentials-mcp-sops/

#MCP #SOPS #OpenCode

Где хранить пароли в NixOS?

NixOS хранит конфигурацию всей системы, включая пароли. И это, очевидно, небезопасно. В этой статье разберёмся, где никсоводы прячут свои пароли.

https://habr.com/ru/articles/1011264/

#nixos #nix #sops #age #sopsnix

Nouvel article sur mon blog : gérer ses secrets avec #sops

https://xieme-art.org/post/gerer-ses-secrets-avec-sops/

Le tout avec des exemples d'utilisation : scripts, #kubernetes et #Nix.

Managing #GitHub repositories and secrets with #OpenTofu, #SOPS, and #1Password.

https://eshlox.net/managing-github-repos-secrets-opentofu-sops-1password

Okay I'm confused with #sops-nix, in setting up a service (in this case, Lubelogger) on #NixOS, I can't use Setting = config.sops.secrets."server/lubelogger/oidc_secret".path; to sub in my Pocket-ID secret? It gives the actual path (/run/secrets/...) but nothing else will build.

Looking through the docs hasn't been helpful.

Wrote a post about setting up sops and the sops-operator on a #homelab #kubernetes cluster

https://unixorn.github.io/post/homelab/k8s/03-secret-management-with-sops/

@homelab #k8s #sops

Wrote a post about setting up sops and the sops-operator on a #homelab #kubernetes cluster

https://unixorn.github.io/post/homelab/k8s/03-secret-management-with-sops/

@homelab #k8s #sops

Final push for input :

I'm trying to get to the bottom of how people find best practice for writing SOPs and what it looks like. You can help by completing the survey online at https://forms.gle/t26bsCqtBCwhq2YV9 or downloading a copy from https://drive.google.com/uc?export=download&id=1Xre41M1MSSf-kjSsxI8lHuThf6RvekWq and emailing it back to me.

Input from ANY industry is useful - and more is probably better.

Responses are confidential and no detail of SOP asked for.

#forensics #SOPs #quality #ISO17025 #standards #DFIR

Please repost/boost for coverage.

I'm trying to understand how people find best practice for writing SOPs and what it looks like.

You can help by completing the survey online at https://forms.gle/t26bsCqtBCwhq2YV9 or downloading a copy from https://drive.google.com/uc?export=download&id=1Xre41M1MSSf-kjSsxI8lHuThf6RvekWq and emailing it back to me.

Input from ANY industry is useful - and more is probably better.

Responses are confidential and no detail of SOP asked for.

#forensics #SOPs #quality #ISO17025 #standards #DFIR

Please repost/boost for coverage.

I'm trying to understand how people find best practice for writing SOPs and what it looks like.

You can help by completing the survey online at https://forms.gle/t26bsCqtBCwhq2YV9 or downloading a copy from https://drive.google.com/uc?export=download&id=1Xre41M1MSSf-kjSsxI8lHuThf6RvekWq and emailing it back to me.

Input from ANY industry is useful - and more is probably better.

Responses are confidential and no detail of SOP asked for.

#forensics #SOPs #quality #ISO17025 #standards #DFIR

Please repost/boost for coverage.

Pre-holiday push for responses:

I'm trying to understand how people find best practice for writing SOPs and what it looks like.

You can help by completing the survey online at https://forms.gle/t26bsCqtBCwhq2YV9 or downloading a copy from https://drive.google.com/uc?export=download&id=1Xre41M1MSSf-kjSsxI8lHuThf6RvekWq and emailing it back to me.

Input from ANY industry is useful - and more is probably better.

Responses are confidential and no detail of SOP asked for.

#forensics #SOPs #quality #ISO17025 #standards #DFIR

Please repost/boost for coverage.

🔐 #SOPS: Secrets OPerationS - simple & flexible tool for managing secrets #devops #security #opensource #infosec

🔑 Encrypts #YAML, #JSON, ENV, INI & binary files with multiple encryption backends: #AWS KMS, #GCP KMS, Azure Key Vault, #age & #PGP

🛡️ Only encrypts values while leaving keys in cleartext for easy diffing & version control in #git repositories

🔄 Key groups with Shamir's Secret Sharing - split data keys requiring multiple identities to decrypt

🧵 👇

🔐 #SOPS: Secrets OPerationS - simple & flexible tool for managing secrets #devops #security #opensource #infosec

🔑 Encrypts #YAML, #JSON, ENV, INI & binary files with multiple encryption backends: #AWS KMS, #GCP KMS, Azure Key Vault, #age & #PGP

🛡️ Only encrypts values while leaving keys in cleartext for easy diffing & version control in #git repositories

🔄 Key groups with Shamir's Secret Sharing - split data keys requiring multiple identities to decrypt

🧵 👇

Best #nixos-anywhere with #sops-nix secrets tips/tricks/how-tos: GO!

I'm exploring how people find best practice for writing SOPs and what it looks like. You can help by completing the survey online at https://forms.gle/t26bsCqtBCwhq2YV9 or downloading a copy from https://drive.google.com/uc?export=download&id=1Xre41M1MSSf-kjSsxI8lHuThf6RvekWq

and emailing it back to me.

Input from ANY industry is useful - and more is probably better.

Responses are confidential and no detail of SOP asked for.

#forensics #SOPs #quality #ISO17025 #standards #DFIR #forensicScience

Please repost/boost for coverage.

I'm still trying to get to the bottom of how people find best practice for writing SOPs and what it looks like. You can help by completing the survey online at https://forms.gle/t26bsCqtBCwhq2YV9 or downloading a copy from https://drive.google.com/uc?export=download&id=1Xre41M1MSSfkjSsxI8lHuThf6RvekWq

and emailing it back to me.

Input from ANY industry is useful - and more is probably better.

Responses are confidential and no detail of SOP asked for.

#forensics #SOPs #quality #ISO17025 #standards #DFIR

Please repost/boost for coverage.

I need to go into my #NixOS configuration and move all my secrets from living on my filesystem into living in my #sops lol

I need to go into my #NixOS configuration and move all my secrets from living on my filesystem into living in my #sops lol

I'm trying to get to the bottom of how people find best practice for writing SOPs and what it looks like. You can help by completing the survey online at https://forms.gle/t26bsCqtBCwhq2YV9 or downloading a copy from https://drive.google.com/uc?export=download&id=1Xre41M1MSSf-kjSsxI8lHuThf6RvekWq and emailing it back to me.

Input from ANY industry is useful - and more is probably better.

Responses are confidential and no detail of SOP asked for.

#forensics #SOPs #quality #ISO17025 #standards #DFIR

Please repost/boost for coverage.

Today's reminder :

I'm trying to get to the bottom of how people find best practice for writing SOPs and what it looks like. You can help by completing the survey online at https://forms.gle/t26bsCqtBCwhq2YV9 or downloading a copy from https://drive.google.com/uc?export=download&id=1Xre41M1MSSf-kjSsxI8lHuThf6RvekWq and emailing it back to me.

Input from ANY industry is useful - and more is probably better.

Responses are confidential and no detail of SOP asked for.

#forensics #SOPs #quality #ISO17025 #standards #DFIR

Please repost/boost for coverage.

Today's reminder :

I'm trying to get to the bottom of how people find best practice for writing SOPs and what it looks like. You can help by completing the survey online at https://forms.gle/t26bsCqtBCwhq2YV9 or downloading a copy from https://drive.google.com/uc?export=download&id=1Xre41M1MSSf-kjSsxI8lHuThf6RvekWq and emailing it back to me.

Input from ANY industry is useful - and more is probably better.

Responses are confidential and no detail of SOP asked for.

#forensics #SOPs #quality #ISO17025 #standards #DFIR

Please repost/boost for coverage.

Daily reminder - I'm trying to get to the bottom of how people find best practice for writing SOPs and what it looks like. You can help by completing the survey online at https://forms.gle/t26bsCqtBCwhq2YV9 or downloading a copy from https://drive.google.com/uc?export=download&id=1Xre41M1MSSf-kjSsxI8lHuThf6RvekWq and emailing it back to me.

Input from ANY industry is useful - and more is probably better.

Responses are confidential and no detail of SOP asked for.

#forensics #SOPs #quality #ISO17025 #standards #DFIR

Please repost/boost for coverage.

Daily reminder - I'm trying to get to the bottom of how people find best practice for writing SOPs and what it looks like. You can help by completing the survey online at https://forms.gle/t26bsCqtBCwhq2YV9 or downloading a copy from https://drive.google.com/uc?export=download&id=1Xre41M1MSSf-kjSsxI8lHuThf6RvekWq and emailing it back to me.

Input from ANY industry is useful - and more is probably better.

Responses are confidential and no detail of SOP asked for.

#forensics #SOPs #quality #ISO17025 #standards #DFIR

Please repost/boost for coverage.

Daily reminder - I'm trying to get to the bottom of how people find best practice for writing SOPs and what it looks like. You can help by completing the survey online at https://forms.gle/t26bsCqtBCwhq2YV9 or downloading a copy from https://drive.google.com/uc?export=download&id=1Xre41M1MSSf-kjSsxI8lHuThf6RvekWq and emailing it back to me.

Input from ANY industry is useful - and more is probably better.

Responses are confidential and no detail of SOP asked for.

#forensics #SOPs #quality #ISO17025 #standards #DFIR

Please repost/boost for coverage.

Please complete my survey on SOPs here https://forms.gle/3SBwpu2mirFDyobX7 or download a copy from https://docs.google.com/document/d/1Xre41M1MSSf-kjSsxI8lHuThf6RvekWq and email it back to me

No confidential information is requested or needed and all responses will be kept confidential.

#SOPs #Standards #WorkInstructions #DFIR #Forensics

Please share or boost to your network for coverage. Input from ANY discpline or industry is useful.

I'm still looking for inputs into my work on SOPs - please complete the survey here https://forms.gle/3SBwpu2mirFDyobX7 or download a copy from and email it back to me https://docs.google.com/document/d/1Xre41M1MSSf-kjSsxI8lHuThf6RvekWq

No confidential information is requested or needed and all responses will be kept confidential.

#SOPs #Standards #WorkInstructions #DFIR #Forensics

Please share or boost to your network for coverage. Input from ANY discpline or industry is useful.

I was just researching how to use sops as a source for user passwords.

After starting to basically implement `sops.secrets.<name>.neededForUsers` I found the option.

#RTFM

https://search.nüschtos.de/?query=sops*user&option_scope=19&option=sops.secrets.%3Cname%3E.neededForUsers

#nixos #sops #flakes #nix

Ghost Operators handle secrets silently. SOPS is a surgical blade for it. #Ansible #SOPS #Vault #Security #Encryption #GhostOps

http://tomsitcafe.com/2025/10/01/ansible-with-sops-secret-handling-on-ghost-level/

Ghost Operators handle secrets silently. SOPS is a surgical blade for it.

https://deadswitch.tomsitcafe.com/2025/09/ansible-sops.html

#Ansible #SOPS #Vault #Security #Encryption #GhostOps

I have a few excited #guix related things on the go:

1. Need to finalize and publish a post-mortem following the outage of cuirass.genenetwork.org
2. (and most exciting): I have a proof-of-concept implementation of a secrets management system for guix. Unlike #sops-guix, this system stores no secrets in configuration, only secret metadata (name, and how to decrypt it at runtime). It configures shepherd services to mount a tmpfs, decrypt secrets (and also populate dotenv files). Stay tuned!

Spent the afternoon building an hda to automate the fx dept USD exports, from SOPs, following the #ASWF standards. This is going to help lookdev massively as now all assets follow the same structure 💪

#OpenUSD #Houdini #SOPs

After a few nights and weekends of mashing keys, I have figured the right order to bring up a #nixos instance built for #proxmox, provision it with #colmena, shove secrets on it with #sops, bring up a docker container, and get it on my @tailscale #tailnet. I don’t know how many times I nearly gave up, but it paid off, and I’m thrilled.

Now to do it again.

🔧 #Sidekick transforms bare metal #VPS into a production-ready hosting platform for streamlined #DevOps

🚀 Key Features:
• Single-command VPS setup integrating #Docker, #Traefik, and #SOPS encryption
• Zero-downtime deployments with high availability and load balancing
• Automatic SSL certificate management with #sslip.io support
• Secure secrets management through encrypted environment files

💻 Technical Highlights:
• Runs on Ubuntu LTS systems
• Requires only SSH key access and public IP
• Supports preview environments tied to git commits
• Direct container deployment from Dockerfiles

💪 Platform Benefits:
• Escape vendor lock-in
• Affordable hosting ($8/month DigitalOcean instance)
• Simple CLI-based management
• Built-in security best practices

Source: https://github.com/MightyMoud/sidekick

My plan for #CD refactoring for #ZeroHR:

https://github.com/numtide/system-manager/tree/main — allows to configure non-NixOS systemd declaratively using Nix programming language.
https://github.com/serokell/deploy-rs — allows to do non-privileged deploys using #nix flakes. Works on non-NixOS linuxes via home-manager.
https://github.com/getsops/sops — for secret management capability, integratable with deploy-rs[1].

[1]: https://samleathers.com/posts/2022-02-11-my-new-network-and-sops.html

#numtide #serokell #systemManager #deployRs #sops

📣 New #webdev related blog post here, introducing my take on what a #Django project template could be for an advanced usage. Obviously #astraluv is there, but also #justsystems , #esbuild , and... #SOPS 🔐

It's very early stage so please tell me what do you think about it 🙏

https://david.guillot.me/en/posts/tech/proposal-for-a-django-project-template/

I made my first contribution to a Go project today! 🎉 https://github.com/cromefire/fritzbox-cloudflare-dyndns/pull/31 This is going to make it easier to specify secrets in my home lab setup using sops.
#GoLang #HomeLab #NixOS #sops

Maybe interesting for some: I built a small little tool which makes your secrets on #nixos (i.e. managed by sops-nix) available as #podman secrets. https://github.com/dereulenspiegel/nix-podman-secrets
#nix #sops