pull down to refresh
Thanks. I've bumped into it already and it's definitely something I want to explore.
I have big plans for my homelab and infra I manage. With NixOS, I fell in love with having things declarative, so the plan is gitops with flux and k3s. Also more topics to write about.
truly end-to-end secure automated provisioning was still a pain in the butt with k3s last time I tried (early this year) but that's mostly because cousin k8s is bloated and they try to simplify it (and then take insecure shortcuts.) I haven't done true manual provisioning since terraform was launched so I'm always holding things against what I have, which is painful at times haha.
Maybe now that some more projects have matured, the time has come to look at it again.
I'll go through it for the first time soon myself. Excited to see how it goes.
Integrate
sops- also available on nixpkgs. I run this myself combined with Hashicorp Vault and Keycloak, which is probably overkill for your setup, but you can easily run it withgpgoragetoo.