Fnox Providers

Fnox supports two fundamental storage modes, each suited to different needs:

• Encrypted inline: Ciphertext lives in fnox.toml (safe to commit to git)
• Remote reference: fnox.toml stores only a key name; the value lives in a cloud service

When to Use This Skill

Use this skill when:

• Choosing which provider to use for a new project
• Setting up age encryption for the first time
• Configuring AWS Secrets Manager or Parameter Store
• Integrating with an existing 1Password, Bitwarden, or Vault setup
• Mixing providers across environments (dev vs production)
• Adding a new team member to an age-encrypted project

When NOT to Use This Skill