ryantm/agenix
age-encrypted secrets for NixOS and Home manager observed · 2026-10-19
Health v2 · maintenance only
99/100
- Activity 100
- Release rhythm 97
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 0.0
- age_days: 2240
- days_rel: 23
- days_push: 2
- n_releases_24m: 3
Adoption not part of the score
2516 stars · 158 forks observed · 2026-10-19
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
Agenix is a Nix library and CLI tool for managing age-encrypted secrets in NixOS and Home Manager using existing SSH public/private key pairs. Encrypted .age files live in the Nix store and are decrypted on target machines during system activation.
Use cases
- store encrypted secrets in the nix store
- deploy api keys and passwords with nixos-rebuild
- encrypt secrets with ssh public keys
- manage secrets declaratively on nixos
- share encrypted secrets across machines without gpg
When to choose
- you use NixOS or Home Manager and want reproducible, in-store secret deployment
- you already have SSH key infrastructure and want to avoid GPG
- you want a small, auditable secret management tool
When to avoid
- you need password-protected SSH keys or ssh-agent support
- you are not using NixOS or Home Manager
- you need dynamic or centralized secret rotation like Vault
Facets
library · maturity active
secrets-management cryptography cli configuration-management security developer-tools self-hosted cli nix nixos age-encryption ssh-keys home-manager secrets-deployment devops linux
2 sources
- readme: https://github.com/ryantm/agenix · fetched 2026-10-19 · 76d1e96f089c
- homepage: https://matrix.to/#/#agenix:nixos.org · fetched 2026-08-29 · cb958f57f9d4
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| ryantm/agenix | main | 99 |
For agents
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem