User avatar
celeste_hearts_lesbianceleste_hearts_transceleste_hearts_demisexual flori_ava_star:~cursor_blinking 🔜@DS26 @star@amazonawaws.com
3w
"This path, along with any secret keys it contains, will be copied into the world-readable Nix store."
hey so uhm. are you fuckinggf stupid.
5
3
13
0

User avatar
LR @lritter@mastodon.gamedev.place
3w
@star sounds like this sentence contorted itself to not have to sound like a "do not"
0
0
1
0
User avatar
Alexia makko_bnuuy @alexia@starlightnet.work
3w
@star me when I don't use agenix
0
0
0
0
User avatar
Eta Flag_Enby @siblingsofthevoid@void.lgbt
3w
@star I- why? there are so many says to handle secrets, why THAT? sops-nix isn't even THAT hard to set up and it does NOT store shit in the store unencrypted.

this is just horrible lol
1
0
0
0
User avatar
celeste_hearts_lesbianceleste_hearts_transceleste_hearts_demisexual flori_ava_star:~cursor_blinking 🔜@DS26 @star@amazonawaws.com
3w
@siblingsofthevoid i THINK they might have meant to phrase it as a warning? fed.amazonawaws.com/notes/aqh0u4vhx1ve84yj
0
0
1
0
User avatar
sodiboo pride_heart @sodiboo@gaysex.cloud
3w
@star yeah,,, neocat_pleading
:celeste_hearts_lesbian:1🔧1
0
0
1
2
User avatar
celeste_hearts_lesbianceleste_hearts_transceleste_hearts_demisexual flori_ava_star:~cursor_blinking 🔜@DS26 @star@amazonawaws.com
3w
you see, were it PHRASED as the warning it is supposed to be, this would be completely fine.

"Do not store secret keys in this file, as the file will be copied into the world-readable Nix store."
2
0
5
0
User avatar
celeste_hearts_lesbianceleste_hearts_transceleste_hearts_demisexual flori_ava_star:~cursor_blinking 🔜@DS26 @star@amazonawaws.com
3w
but now its just like

"this will leak all ur secrets heh :3 :3 :3 :3 :3 woopsiedoops"
❤️1
1
0
4
1
User avatar
celeste_hearts_lesbianceleste_hearts_transceleste_hearts_demisexual flori_ava_star:~cursor_blinking 🔜@DS26 @star@amazonawaws.com
3w
services.leakAllSecrets.enable
1
0
8
0
User avatar
celeste_hearts_lesbianceleste_hearts_transceleste_hearts_demisexual flori_ava_star:~cursor_blinking 🔜@DS26 @star@amazonawaws.com
3w
now i would wonder where i could make a pull request to improve this but i don't quite feel like getting left on read for 2000 aeons tonite
1
0
5
0
User avatar
Eta Flag_Enby @siblingsofthevoid@void.lgbt
3w
@star Now I'm interested where you found this :p
1
0
0
0
User avatar
celeste_hearts_lesbianceleste_hearts_transceleste_hearts_demisexual flori_ava_star:~cursor_blinking 🔜@DS26 @star@amazonawaws.com
3w
@siblingsofthevoid markdown parser hates me
1
0
1
0
User avatar
Eta Flag_Enby @siblingsofthevoid@void.lgbt
3w
@star Don't worry, It hates all of us lol
1
0
1
0
User avatar
celeste_hearts_lesbianceleste_hearts_transceleste_hearts_demisexual flori_ava_star:~cursor_blinking 🔜@DS26 @star@amazonawaws.com
3w
@siblingsofthevoid ok i edited it now it works :3
0
0
1
0
User avatar
Eta Flag_Enby @siblingsofthevoid@void.lgbt
3w
@star Yeah, You're right. That is a warning. Hell, It's a warning without call to action. If all they did was "Do not put secrets into this directory or file. [...]" and then it'd be clear xD
0
0
1
0
User avatar
[4FBB09] @5225225@furry.engineer
2w
@star @siblingsofthevoid actually, looking at it, this means that you can't use secret keys with this (because searxng doesn't support keyfiles to let you put secret keys in a public config(AFAICS?), so you need to make the whole config a secret. and if the config itself is copied to the nix store...)

imo it should be changed to not do that, and you being told "hey if you want a secret config, generate a whole ass config with the secrets embedded in it, then give me the path there"
:akko_aah@void.lgbt:1
0
0
2
1