.git-crypt|secrets: setup git-crypt as secrets provider

This is arguably the safest way I can think of that isn't stupidly annoying. Both `sops-nix` and `agenix` require you to manage a secondary key, which is a bit annoying for me. This is significantly easier, and moreso because the encryption happens transparently. On my system it wont look encrypted at all, but online you will never be able to see it. New collaborators: 87051A83 Ali Rizvi <[email protected]>
Frontear · Nov 26, 2024 · 364ef85 · 364ef85
1 parent df7b1eb
commit 364ef85
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/.git-crypt/.gitattributes b/.git-crypt/.gitattributes
@@ -0,0 +1,4 @@
+# Do not edit this file.  To specify the files to encrypt, create your own
+# .gitattributes file in the directory where your files are.
+* !filter !diff
+*.gpg binary
diff --git a/.git-crypt/keys/default/0/6A25DEBE41DB0C153AB5BB345290E18B87051A83.gpg b/.git-crypt/keys/default/0/6A25DEBE41DB0C153AB5BB345290E18B87051A83.gpg
@@ -0,0 +1 @@
+�^�aL��@EQx"�4��!}�A]��"�כ�P��2�c����[0�-PŬ�Q�J9-�����FGڂ����>�$r�<�O�ND�4�|,����T7'�j�@B�6��x��aB�k�9���Vzd&)^B"c��D	�"�|��q���_�C�6�1�Ɇ,r.n/�i���F�~��0z�����*4Ъ����@GU1a4�������!||�v�}���C��P|q'�Ý���g+�����)#6F���MKr�R�{�Q8����"��j]�l��v��>u^�߆�`ه�4B�
diff --git a/nix/devShells/shell.nix b/nix/devShells/shell.nix
@@ -3,10 +3,14 @@
 
   introduce-bin,
   nixos-clean,
+
+  git-crypt,
 }:
 mkShellNoCC {
   packages = [
     introduce-bin
     nixos-clean
+
+    git-crypt
   ];
 }
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		�^�aL��@EQx"�4��!}�A]��"�כ�P��2�c��[0�-PŬ�Q�J9-��FGڂ��>�$r�<�O�ND�4�\|,��T7'�j�@B�6��x��aB�k�9��Vzd&)^B"c��D �"�\|��q��_�C�6�1�Ɇ,r.n/�i��F�~��0z��*4Ъ��@GU1a4��!\|\|�v�}��C��P\|q'�Ý��g+��)#6F��MKr�R�{�Q8��"��j]�l��v��>u^�߆�`ه�4B�