credentials-manager

Credentials Manager

This skill helps you manage secrets and access tokens in the dotfiles, following the security policies defined in references/policy.md.

Features

1. Edit Secrets

Safely edit secrets.yaml files using the sops wrapper.

agent-skills/credentials-manager/scripts/edit-secrets.sh <path/to/secrets.yaml>

2. Configure Nix Access Tokens

Generate the necessary Nix configuration to securely inject access tokens (e.g., GitHub PAT) into /etc/nix/nix-access-tokens-work.conf.

agent-skills/credentials-manager/scripts/setup-token.sh <token_variable_name>

Example:

agent-skills/credentials-manager/scripts/setup-token.sh github_pat_work

This will output the sops.templates and nix.extraOptions configuration to be added to your darwin.nix.

Policies

• Separate Files: Work credentials must be stored in separate files (e.g., nix-access-tokens-work.conf) to avoid conflicts.
• Sops Encryption: All secrets must be encrypted using sops.
• Reference: See references/policy.md for the detailed security policy.