Secrets

cells/secrets/ connects encrypted secret management to the security branch.

Up: cells

Down: SOPS secrets | system persistence

What this subtree does

The secrets leaf points sops-nix at a private secrets file and a persistent age key file. It contributes both NixOS and Home Manager modules.

Why it belongs to security

Secrets are not just configuration. They decide what credentials are materialized on disk, where keys live, and which users or services can read them.

Public documentation rule

Document the pattern, not the values. Do not publish real secret repository paths, secret names that reveal infrastructure, bridge credentials, private keys, tokens, or production domains.