From 9c4aef5f9a8a28973d34f0897bc3a73e9f595b71 Mon Sep 17 00:00:00 2001 From: Sridhar Ratnakumar <3998+srid@users.noreply.github.com> Date: Mon, 11 Nov 2024 13:51:58 -0500 Subject: [PATCH] readme: Link to 'Service Account' ... for those 1Password users unfamliar with it. --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 0dca2bc..af97f66 100644 --- a/README.md +++ b/README.md @@ -10,7 +10,7 @@ Manage secrets for NixOS with 1Password natively with a NixOS module. ## Security -With this setup, you should only need one unencrypted secret on your machine; your 1Password Service Account token. +With this setup, you should only need one unencrypted secret on your machine; your [1Password Service Account](https://developer.1password.com/docs/service-accounts/) token. You should set your Service Account token to have the _absolute minimum required permissions._ Usually this means read-only access to only a single vault in which your server secrets are kept. You should set an expiration on the token and [rotate it regularly](https://developer.1password.com/docs/service-accounts/manage-service-accounts/#rotate-token).