Comment by gf297

Comment by gf297 10 months ago

2 replies

What's the purpose of encrypting the env file with sops, when the age secret key is stored on the VPS? If someone has access to the encrypted env file, they will also have access to the secret key, and can decrypt it.

nsluss 10 months ago

only if they can login as the owner of the key. Most of my team can get on our vps, only a couple could get our age key.