NixOS Artifacts Store

• Documentation
• Discourse

Overview

Nixos-artifacts is a framework to unify artifacts and secrets in NixOS flakes.

Inspired by:

• Clan vars
• NixOS PR #370444

Note: This project is currently in the design phase.

Core Concept

NixOS-artifacts provides an abstraction layer over various secret management backends, including:

• agenix
• sops-nix (not yet)
• colmena (not yet)

Key Features

• Standardized Interface: Common API for defining and managing secrets
• Secret Rotation: Built-in workflow for secret generation and rotation
• Multi-Backend Support: Mix different backends within the same configuration. You can choose different backends for each artifact.

Limitations

To maintain compatibility across backends, some specialized features of individual backends may not be accessible directly (e.g., public vars in clan).

Implementation

Each backend is provided as a separate flake that you can add to your configuration as needed.