serious project

Secrets in a public repo, safely

Set up declarative SOPS-based secret management shared across 4 machines, each decrypting with its own age key, stored in a public GitHub repo without leaking secrets.

see it →

The full write-up comes out of the interview: why, how, what broke, what it taught me, with pictures and links to the config.

← all projects

view source