Skill Detail

Inject SOPS-managed secrets into NixOS and Home Manager configs with sops-nix

Materialize age or PGP encrypted SOPS secrets inside declarative NixOS and Home Manager systems during activation without hand-copying values.

Security & VerificationMulti-Framework
Security & Verification Multi-Framework Security Reviewed
⭐ 2.8k GitHub stars
COPY SKILL INSTRUCTIONS (OPTIONAL)
npx skills add agentskillexchange/skills --skill inject-sops-managed-secrets-into-nixos-and-home-manager-configs-with-sops-nix Copy
Uses the third-party skills CLI, not an ASE-owned installer. Check your agent’s compatibility. This copies instructions; complete the upstream tool setup below separately.
At a glance
Tools required
NixOS or Home Manager configuration, sops-nix module, SOPS-encrypted secret files, age or PGP keys, Nix build and activation access
Install & setup
Add sops-nix to the target NixOS or Home Manager configuration per the upstream module instructions, configure SOPS and the decryption keys, then define the secrets to materialize during activation or user environment setup.
Author
Mic92
Publisher
Individual
Last updated
Apr 19, 2026
Quick brief

Use sops-nix when an agent needs to wire encrypted SOPS secrets into NixOS or Home Manager configurations so they are decrypted and materialized at activation time. A user should invoke this instead of using SOPS by itself when the job is declarative Nix secret integration and deployment, not generic secret file editing or encryption. The scope boundary is clear and skill-shaped: NixOS and Home Manager secret injection from SOPS-managed inputs, not a general secret management product card.