Lately, I’ve been thinking of implementing a secrets management system such as Infiscal, etc. Does anyone use this or something similar like Hashicorp?

How hard would it be to deploy on a pre-existing set up? How does that work? Do you call the required secret in your Docker compose? What makes a secret manager more secure than pulling secrets from an .env file?

Which secret manager is the most popular/better among selfhosters?

  • @[email protected]
    link
    fedilink
    English
    32 months ago

    Is it a single server? Maybe something like sops is all you need

    There’s an oss fork of vault now as well. Openbao.

    • irmadladOP
      link
      fedilink
      English
      22 months ago

      Is it a single server?

      Well I run a hybrid set up of 3 VPS and one rack in the closet.

      Maybe something like sops is all you need

      Unpack that a little for me if you would.