Menu
Re-encrypt all secrets after modifying .age files or changing host keys
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Basé sur la classification professionnelle SOC
Add an AeroSpace window rule to assign an app/window to a workspace (macOS only)
Create or update secrets using Infisical (preferred) or legacy agenix files
Decrypt and view the contents of an .age secret file
Deploy NixOS/Darwin configuration to local or remote host using justfile commands
Analyze project from URL/path and auto-detect build system to create Nix package
Add a new project to ruinage with DNS, Caddy, Gatus, and deployment
| name | rekey-secrets |
| description | Re-encrypt all secrets after modifying .age files or changing host keys |
| compatibility | Requires agenix, agenix-helper |
| metadata | {"author":"ruinous.ai","version":"1.0","domain":"secrets"} |
Re-encrypt all secrets after modifying .age files or when host keys change.
When to use:
.age filesecrets.nix# Unlock agenix before rekeying
just unlock
Rekey all secrets:
just rekey
Stage and verify rekeyed files:
git add secrets/
ls secrets/nixos/*/
Lock agenix when done:
agenix-helper lock
After agenix rekey -a, encrypted secrets are stored in:
secrets/nixos/<hostname>/<hash>-<secret_name>.age
secrets.nix have valid keys# Ensure agenix is unlocked
just unlock
# Unlock, rekey, and stage
just unlock
just rekey
git add secrets/
just unlock before startingjust rekey)secrets/nixos/ contains updated filesgit add secrets/)agenix-helper lock when done