dotfiles

 1### Credentials
 2
 3The authentication credentials are managed using [`sops-nix`](https://github.com/Mic92/sops-nix) at `secrets`.
 4The [`sops`](https://github.com/mozilla/sops) encrypted secrets (using GPG) are stored at multiple places, like in this directory, as well as [`passwords`](./passwords).
 5User passwords are generated using `mkpasswd -m sha-512` and specified using the `hashedPasswordFile` option.
 6The `sops` encrypted secrets are of `binary` format (and have the extension `.secret`) and can be conveniently managed using the [`os`](../scripts/README.md) `secret` command.
 7The `keys` directory contains the _public_ User GPG Keys which are automatically imported
 8
 9To create a secret, use the `os secret create` command, and append the directory along with requisite access permissions to the `secrets.yaml` file.
10Device-specific secrets are automatically imported, if a directory (with the same name as the device `HOSTNAME`) containing them is present in this directory
11
12> [!NOTE]
13> Any update to a `creation_rule` in [`secrets.yaml`](./secrets.yaml) must be accompanied by an `os secret update` to re-encrypt for the new key set
14
15#### Per-User Secrets
16
17Secrets scoped to a single user (decrypted at login using their _personal_ GPG Key) are stored under [`user`](./user) in a directory named after their `username`.
18
19> [!IMPORTANT]
20> Do not forget to import the `homeManager.secrets` module in the user configuration