The chezmoi integration with 1Password is excellent; for those who prefer Bitwarden, it supports both the default CLI (which has some inexcusable behaviours for a security product, IMO) and `rbw` (which is infinitely better than the default CLI). It supports `pass`, `gopass`, `passage`, AWS Secrets Manager, KeePass, and several other approaches.
It was the work of a couple of minutes to enable a secret for a Claude Code API token to be mounted in a VM where I'm running Claude for a project where the value is pulled from 1Password and I can regenerate it and reapply without fear.
If one doesn't have to worry about secrets in one's dotfiles, I'm sure that other dotfile managers including Nix with Home Manager will suffice. I do, so they won't.
"I have checked the latest threat intelligence, the National Vulnerability Database (NVD), and Microsoft's own documentation, and there is currently no public record of CVE-2026-41089"
When the sock bot dries the socks, matches and folds them together we're at peak robot. Come to think of it, its got to not lose either of them also. Current tech falls short of this.
> When the sock bot dries the socks, matches and folds them together we're at peak robot. Come to think of it, its got to not lose either of them also.
Missing socks (and containers or their lids) are still great unsolved problems in 2026. Solving this issue is like fusion, always 10 years away.
reply