-
Find a way to manage secrets
- Evaluate:
- Public repo with encrypted secrets
- Public repo (base) + Private repo (encrypted secrets, wrapper)
- Can I use Bitwarden?
- Evaluate:
-
Have a standard
kit-runtime-setupcommand to do setup that doesn't belong to nix config- Creating files that should not be in
/nix/store- Like
~/.ssh/nix_configis symlinked - Like
~/.ssh/configimport the above and is writable by user
- Like
- Copies k3d connection information etc.
- Showing instructions for how to do system setup in case the system is only home-manager based
- Should probably have
--dry-run(changes that are going to be made),--diff(what has changed on disk) - Be careful to not lose user files. Always, always, always backup!
- Creating files that should not be in