Secrets · Technology in use
Bitwarden
Bitwarden Secrets Manager: a secrets store with per-project access and machine clients.
The problem it solves
Bitwarden Secrets Manager: a secrets store with per-project access and machine clients.
Technical rationale
Bitwarden Secrets Manager separates access by project and provides machine clients, so a host reads what belongs to it without a copy of the secret on disk. What it solves is not storing the credential but how it reaches the process: one script injects it as an environment variable, and nothing passes on a command line, where it would remain in history and in the process list.
How I have used it
It holds every homelab secret; a single script reads them and every make target goes through it.