185 points by bpierre 27 October 2025 | 43 comments
# New person joins the team:
# 7. Team lead updates fnox.toml with new recipient
# Then re-encrypts all secrets:
fnox set DATABASE_URL "$(fnox get DATABASE_URL)" --provider age # ... repeat for all secrets
It's a bit surprising you have to manually do this, I'd imagine fnox already has knowledge of all the secrets and could do this automatically.
Fnox, a secret manager that pairs well with mise
(github.com)185 points by bpierre 27 October 2025 | 43 comments
Comments
# New person joins the team:
# 7. Team lead updates fnox.toml with new recipient
# Then re-encrypts all secrets:
fnox set DATABASE_URL "$(fnox get DATABASE_URL)" --provider age # ... repeat for all secrets
It's a bit surprising you have to manually do this, I'd imagine fnox already has knowledge of all the secrets and could do this automatically.