القائمة
Re-encrypt all secrets after modifying .age files or changing host keys
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
| name | rekey-secrets |
| description | Re-encrypt all secrets after modifying .age files or changing host keys |
| compatibility | Requires agenix, agenix-helper |
| metadata | {"author":"ruinous.ai","version":"1.0","domain":"secrets"} |
Re-encrypt all secrets after modifying .age files or when host keys change.
When to use:
.age filesecrets.nix# Unlock agenix before rekeying
just unlock
Rekey all secrets:
just rekey
Stage and verify rekeyed files:
git add secrets/
ls secrets/nixos/*/
Lock agenix when done:
agenix-helper lock
After agenix rekey -a, encrypted secrets are stored in:
secrets/nixos/<hostname>/<hash>-<secret_name>.age
secrets.nix have valid keys# Ensure agenix is unlocked
just unlock
# Unlock, rekey, and stage
just unlock
just rekey
git add secrets/
just unlock before startingjust rekey)secrets/nixos/ contains updated filesgit add secrets/)agenix-helper lock when doneAdd an AeroSpace window rule to assign an app/window to a workspace (macOS only)
Create or update secrets using Infisical (preferred) or legacy agenix files
Decrypt and view the contents of an .age secret file
Deploy NixOS/Darwin configuration to local or remote host using justfile commands
Analyze project from URL/path and auto-detect build system to create Nix package
Add a new project to ruinage with DNS, Caddy, Gatus, and deployment