Tag
A technical analysis of why .env files became a de facto configuration standard despite lacking schema, spec, and security semantics, and why teams should replace them with more durable declarations.
This article argues that secrets should not be stored in configuration files, using an audit of NixOS modules to show that a quarter of them require workarounds to separate secrets from config. It advocates for dedicated runtime channels for secrets.
The author shares their experience migrating from GNU Stow to Chezmoi for managing dotfiles across multiple machines, citing Chezmoi's real-file approach and templating as key improvements.
nixidy is a Nix-based tool for managing Kubernetes GitOps deployments that replaces Helm value files and Kustomize overlays with typed, reproducible Nix expressions. This tutorial walks through setting up a nixidy project with Argo CD, generating plain YAML for review.
The author details the development of 'Deptool', a custom Python-based deployment and configuration management tool designed to be faster and more predictable than existing solutions like Ansible, driven by a desire for digital sovereignty and better tooling.
A guide on declaratively installing NixOS over the network using tools like nixos-anywhere, with an emphasis on managing configuration files under version control.
Ansible is a radically simple IT automation system for configuration management, application deployment, cloud provisioning, and multi-node orchestration. It is agentless, uses SSH, and focuses on simplicity and security.