[gf297]

What's the purpose of encrypting the env file with sops, when the age secret key is stored on the VPS? If someone has access to the encrypted env file, they will also have access to the secret key, and can decrypt it.

[nsluss]

only if they can login as the owner of the key. Most of my team can get on our vps, only a couple could get our age key.