Agenix Skill

Overview

agenix is a lightweight, SSH-based secrets management solution for NixOS that uses age encryption to securely store and deploy sensitive information. It provides a CLI tool for encrypting secrets and a NixOS/Home Manager module for automated decryption and deployment.

Key Features

• SSH key integration: Leverages existing SSH infrastructure for encryption/decryption
• Nix-native: Encrypted secrets stored in Nix store, decrypted during activation
• Minimal dependencies: No GPG required, small auditable codebase
• Automatic decryption: Secrets decrypt during nixos-rebuild switch using host keys
• Multi-platform: Supports NixOS, Home Manager, and nix-darwin
• Simple workflow: Edit secrets with your $EDITOR, auto-encrypt on save
• Version control friendly: Encrypted secrets can be safely committed to Git

Why agenix?