Hacker News Reader

I have a private repo on GitHub which contains my dotfiles with SSH private keys, tokens, secrets and all kinds of secret stuff. I was uncomfortable storing it there, but my laziness/lack of time kept it there. Finally I will be able to encrypt the entire repo, yay!!

View on HN

if you're uncomfortable storing them there, you're going to rotate all the secrets after you move the repo to keybase, right?

Yes, I will. That's a long overdue also :D

did you delete the unencrypted repo from github? actually even if you did, a version of it might still be lurking in some corner. Maybe time to create a new set of private keys?

Reply on news.ycombinator.com