Secrets management

[tomodachi94]

The most annoying thing about (hypothetically) deploying a new system is secrets management. I have a bunch of secrets floating around my system with no reliable way to back them up.

https://wiki.nixos.org/wiki/Comparison_of_secret_managing_schemes

I'm hesitant to include them in-tree.

[tomodachi94]

Bitwarden Secrets Manager looks promising. Free plan, self-hostable if that changes, per-machine credentials (the only manual step would be creating a machine account and adding its access key somewhere on the system).

I'm not sure if any pre-existing NixOS integration is available, but it should be trivial thanks to the CLI.