Skip to content

Commit

Permalink
Merge pull request #3 from srid/patch-1
Browse files Browse the repository at this point in the history
readme: Link to 'Service Account'
  • Loading branch information
mrjones2014 authored Nov 12, 2024
2 parents 5a2f62c + 9c4aef5 commit eee9f3e
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ Manage secrets for NixOS with 1Password natively with a NixOS module.
## Security

With this setup, you should only need one unencrypted secret on your machine; your 1Password Service Account token.
With this setup, you should only need one unencrypted secret on your machine; your [1Password Service Account](https://developer.1password.com/docs/service-accounts/) token.
You should set your Service Account token to have the _absolute minimum required permissions._ Usually this means read-only
access to only a single vault in which your server secrets are kept. You should set an expiration on the token and
[rotate it regularly](https://developer.1password.com/docs/service-accounts/manage-service-accounts/#rotate-token).
Expand Down

0 comments on commit eee9f3e

Please sign in to comment.