timd

Just some additional info on this... I recently used a slightly simpler variation of the function defined in the nixpkgs nix-daemon module: https://github.com/NixOS/nixpkgs/blob/c8f5b17a98b357e24fe0eb5a117820899b363750/nixos/modules/services/misc/nix-daemon.nix#L32-L78 To export a `NIX_CONFIG` environment in a...

Simple instructions are now included: [rendered](https://github.com/nrdxp/agenix/tree/yubikey#yubikey-support). Also be sure to read documentation for [age-plugin-yubikey](https://github.com/str4d/age-plugin-yubikey#yubikey-plugin-for-age-clients).

I don't see any specific doc on yubikey versions, but I would assume that as long as your yubikey has the PIV application available that it should work.

PIN policy has been updated to work with 'never' as expected. Ideally, we would want the 'once' policy to still PIN protect the secrets, but because there is still no...

> Q: Does that happen on re-run? It seems to. Changelog is set to autogenerate on every PR merge and there have been about 3 of those in the last...

just a heads up to interested parties, now would be a good time to attempt a review as it has just been recently rebased, I've been using this for several...

> Do people mind non-maintainer reviews? (not done much OSS) Certainly wouldn't hurt anything. Someone with merge access ultimately has to pull the trigger anyway.

I would really appreciate this feature. Right now my app has a Struct describing what are basically inputs to all of my cli subcommands. It would be super great to...

I am currently experimenting with impermanence along with: ```nix { # load blank root on every boot boot.initrd.postDeviceCommands = lib.mkAfter '' zfs rollback -r rpool/local/root@blank ''; } ``` To allow...

I'm doing this as well, just haven't gotten around to making a proper profile for it