sops-nix supports two basic ways of encryption, GPG and age. GPG is based on GnuPG and encrypts against GPG public keys. Private GPG keys may be used to decrypt the secrets on the target machine. The ...