HN Reader

Love the thought put into mise and now fnox. They’re a joy to use.

I was about to implement it into a pilot project, but then ran into this while reading the docs:

# New person joins the team:

# 7. Team lead updates fnox.toml with new recipient

# Then re-encrypts all secrets:

fnox set DATABASE_URL "$(fnox get DATABASE_URL)" --provider age # ... repeat for all secrets

It's a bit surprising you have to manually do this, I'd imagine fnox already has knowledge of all the secrets and could do this automatically.

From the initial feature set it sounds like Mozilla SOPS.

There's no explanation or link to mise from that page that I can see. I now know what mise is, but that's from googling

Any alternatives to mise with less bloat? I don’t want the direnv and tasks functionality

If you need to manage your dev secrets, it seems like you've fucked up? It's 2025, any secrets should be generated on or provisioned on a single machine. If you're copying them or storing them, then https://xkcd.com/463/