# ryantm/agenix

age-encrypted secrets for NixOS and Home manager

Repository: https://github.com/ryantm/agenix
Canonical: https://ross.abutalabs.com/products/agenix
Homepage: https://matrix.to/#/#agenix:nixos.org
Language: Nix
License: CC0-1.0
License Family: permissive
Topics: nixos, encryption
Last push: 2026-02-04T00:31:49+00:00

## Health v2 (maintenance only)
Score: 52/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 65, release rhythm 8, longevity 100
- inputs: {"age_days": 2192, "days_push": 211, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2468, forks 156 (observed 2026-08-28T04:06:53.742326+00:00)

## What it is
Agenix is a Nix library and CLI tool for managing age-encrypted secrets in NixOS and Home Manager using existing SSH public/private key pairs. Encrypted .age files live in the Nix store and are decrypted on target machines during system activation.

## Use cases
- store encrypted secrets in the nix store
- deploy api keys and passwords with nixos-rebuild
- encrypt secrets with ssh public keys
- manage secrets declaratively on nixos
- share encrypted secrets across machines without gpg

## When to choose
- you use NixOS or Home Manager and want reproducible, in-store secret deployment
- you already have SSH key infrastructure and want to avoid GPG
- you want a small, auditable secret management tool

## When to avoid
- you need password-protected SSH keys or ssh-agent support
- you are not using NixOS or Home Manager
- you need dynamic or centralized secret rotation like Vault

## Facets
- artifact type: library
- maturity: active
- function: secrets-management, cryptography, cli, configuration-management
- domain: security, developer-tools, self-hosted
- platform: cli
- tags: nix, nixos, age-encryption, ssh-keys, home-manager, secrets-deployment, devops, linux

## Member repositories
- ryantm/agenix (main) score 52

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:53.742326+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:29:11.790947+00:00, confidence not recorded.
  - readme: https://github.com/ryantm/agenix (fetched 2026-08-28T04:06:53.742326+00:00, sha 76d1e96f089c)
  - homepage: https://matrix.to/#/#agenix:nixos.org (fetched 2026-08-29T10:10:36.774318+00:00, sha cb958f57f9d4)
- Data as of 2026-08-30T08:39:29.467469+00:00.