{"slug": "sops-nix", "name": "sops-nix", "category": "other", "category_name": "Other software", "description": "", "recommenders": 2, "commenters": 2, "warners": 0, "score": 1.819, "rising": 0.67, "first": "2026-01-31", "latest": "2026-09-25", "why": "", "why_is_quote": false, "has_verdict": false, "sentiment": {"recommend": 2, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 0, 1, 0, 0, 0, 0, 0, 0, 0, 1, 0], "listed": false, "loved": [], "caveat": "", "short_quote": "", "icon": false, "domain": null, "github_repo": "github.com/mic92/sops-nix", "official_url": "https://github.com/mic92/sops-nix", "pricing": "", "aliases": ["sops-nix"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 797611411, "item_id": 49850713, "url": "https://news.ycombinator.com/item?id=49850713", "by": "Sugimot0", "date": "2026-09-25", "stance": "recommend", "quote": "sops-nix for secrets", "excerpt": "I used to wonder this same question and weighed guix and nix quite a bit before moving to the nix camp. Guix on paper really sounds ideal, it feels like a more compelling design, more first principles, it's all scheme, really exciting ideas under the hood. But design intent is not a substitute for the actual user experience. IRL it's too much hassle: weak package coverage, weak ecosystem, a steep learning curve, most", "context": "", "use_case": "secrets management", "switched_from": "", "story": "Dutch governments builds alternative for Microsoft based on NixOS"}, {"id": 797611331, "item_id": 49850708, "url": "https://news.ycombinator.com/item?id=49850708", "by": "Sugimot0", "date": "2026-09-25", "stance": "recommend", "quote": "sops-nix for secrets", "excerpt": "I used to wonder this same question and weighed guix and nix quite a bit before moving to the nix camp. Guix on paper really sounds ideal, it feels like a more compelling design, more first principles, it's all scheme, really exciting ideas under the hood. But design intent is not a substitute for the actual user experience. IRL it's too much hassle: weak package coverage, weak ecosystem, a steep learning curve, most", "context": "", "use_case": "secrets management", "switched_from": "", "story": "Dutch governments builds alternative for Microsoft based on NixOS"}, {"id": 749465024, "item_id": 46841564, "url": "https://news.ycombinator.com/item?id=46841564", "by": "c0balt", "date": "2026-01-31", "stance": "recommend", "quote": "I would strongly recommend sops-nix[0].", "excerpt": "I would strongly recommend sops-nix[0]. Pair this with ssh-to-age/ssh-to-gpg for the keys for each server. We are using this at $work for multiple servers, one notable advantages is that it works in teams (for multiple people) and git (and also gitops). For remote installations nixos-anywhere is great. deploy-rs or colemna is fine, nixos-rebuild with `--target-host` is also working well for us however. [0]: https://g", "context": "uses it at work for multiple servers", "use_case": "NixOS secrets management", "switched_from": "", "story": "Guix System First Impressions as a Nix User"}]}], "caveats": [], "who": [{"by": "c0balt", "context": "uses it at work for multiple servers", "url": "https://news.ycombinator.com/item?id=46841564", "date": "2026-01-31"}], "tags": [], "use_cases": ["secrets management", "nixos secrets management"], "compared": [{"slug": "colmena", "name": "colmena", "co": 3, "switched_from": 0, "switched_to": 0}, {"slug": "nixos-anywhere", "name": "nixos-anywhere", "co": 3, "switched_from": 0, "switched_to": 0}, {"slug": "deploy-rs", "name": "deploy-rs", "co": 3, "switched_from": 0, "switched_to": 0}, {"slug": "restic", "name": "restic", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "disko", "name": "disko", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "nixos", "name": "NixOS", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49841563", "title": "Dutch governments builds alternative for Microsoft based on NixOS", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=46835612", "title": "Guix System First Impressions as a Nix User", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {"recommend": 1}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {}, "2026-09": {"recommend": 1}, "2026-10": {}}, "quotes": [{"id": 797611411, "item_id": 49850713, "url": "https://news.ycombinator.com/item?id=49850713", "by": "Sugimot0", "date": "2026-09-25", "stance": "recommend", "quote": "sops-nix for secrets", "excerpt": "I used to wonder this same question and weighed guix and nix quite a bit before moving to the nix camp. Guix on paper really sounds ideal, it feels like a more compelling design, more first principles, it's all scheme, really exciting ideas under the hood. But design intent is not a substitute for the actual user experience. IRL it's too much hassle: weak package coverage, weak ecosystem, a steep learning curve, most", "context": "", "use_case": "secrets management", "switched_from": "", "story": "Dutch governments builds alternative for Microsoft based on NixOS"}, {"id": 797611331, "item_id": 49850708, "url": "https://news.ycombinator.com/item?id=49850708", "by": "Sugimot0", "date": "2026-09-25", "stance": "recommend", "quote": "sops-nix for secrets", "excerpt": "I used to wonder this same question and weighed guix and nix quite a bit before moving to the nix camp. Guix on paper really sounds ideal, it feels like a more compelling design, more first principles, it's all scheme, really exciting ideas under the hood. But design intent is not a substitute for the actual user experience. IRL it's too much hassle: weak package coverage, weak ecosystem, a steep learning curve, most", "context": "", "use_case": "secrets management", "switched_from": "", "story": "Dutch governments builds alternative for Microsoft based on NixOS"}, {"id": 749465024, "item_id": 46841564, "url": "https://news.ycombinator.com/item?id=46841564", "by": "c0balt", "date": "2026-01-31", "stance": "recommend", "quote": "I would strongly recommend sops-nix[0].", "excerpt": "I would strongly recommend sops-nix[0]. Pair this with ssh-to-age/ssh-to-gpg for the keys for each server. We are using this at $work for multiple servers, one notable advantages is that it works in teams (for multiple people) and git (and also gitops). For remote installations nixos-anywhere is great. deploy-rs or colemna is fine, nixos-rebuild with `--target-host` is also working well for us however. [0]: https://g", "context": "uses it at work for multiple servers", "use_case": "NixOS secrets management", "switched_from": "", "story": "Guix System First Impressions as a Nix User"}]}