nix-secret-manager/checks.nix, branch mainA tool to manage credentials and other secrets as mutable state within a NixOS environment, consisting of a Rust executable, NixOS configuration, and associated documentation. Published as part of the Small Tech Kit, ISL's public resource for small organizations that want to host their own infrastructure, but usable independently.http://code.internetsafetylabs.org/nix-secret-manager/atom?h=main2025-12-18T21:37:52+00:00implement the secret-list command2025-12-18T21:37:52+00:00Irene Knappireneista@internetsafetylabs.org2025-12-17T23:16:20+00:00urn:sha1:d15feffcdb262f5e4686297e156319591895a945
Change-Id: I5e1570940fedf52bb560fd824270e201757004ed
format test-case JSON before diffing it2025-09-10T03:40:09+00:00Irene Knappireneista@internetsafetylabs.org2025-09-10T03:40:09+00:00urn:sha1:a0061153aca2bb13b167efd6263a6fa83150e160
hopefully this will make the diffs more readable; otherwise the entire
JSON file is a single huge line...
depending on Perl feels heavyweight but keep in mind that Perl is already a
mandatory part of any Linux system I'm familiar with, and it has a very
nice JSON pretty-printer
Change-Id: I817b4f6b63152673b31aeb32a3255d4c1b83942e
make a really fancy test harness for nix module evaluation2025-09-10T03:26:57+00:00Irene Knappireneista@internetsafetylabs.org2025-09-10T03:19:12+00:00urn:sha1:b7887228c4866b16b3d5cf7d923739ed9d7ea104
I've never done this before and am really proud of the code; I hope the
comments help but feel free to ask questions.
As you can see by looking at the diffs to `options.nix`, it did catch
several issues that had gotten through up to this point. I'm pretty
pleased with that. As before, `nix flake check` is all you need to do to
run it.
Change-Id: I99a550e92d7b4770e52b6aba763cff2bdc4c9287