Skip to content

Commit

Permalink
readme: Link to 'Service Account'
Browse files Browse the repository at this point in the history
... for those 1Password users unfamliar with it.
  • Loading branch information
srid authored Nov 11, 2024
1 parent 5a2f62c commit 9c4aef5
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ Manage secrets for NixOS with 1Password natively with a NixOS module.
## Security

With this setup, you should only need one unencrypted secret on your machine; your 1Password Service Account token.
With this setup, you should only need one unencrypted secret on your machine; your [1Password Service Account](https://developer.1password.com/docs/service-accounts/) token.
You should set your Service Account token to have the _absolute minimum required permissions._ Usually this means read-only
access to only a single vault in which your server secrets are kept. You should set an expiration on the token and
[rotate it regularly](https://developer.1password.com/docs/service-accounts/manage-service-accounts/#rotate-token).
Expand Down

0 comments on commit 9c4aef5

Please sign in to comment.