Docker

Apr 29, 2026 Post

Secrets at Rest: SOPS + age for Docker Compose Homelabs

SOPS encrypts .env files in place, git tracks the encrypted versions, and sops exec-file decrypts them into memory at deploy time. Plaintext never touches disk.