Live data from Hacker News

Show HN: Infisical – open-source secrets manager for developers

infisical.com

21–30 of 32 posts

Re: Show HN: Infisical – open-source secrets manager for developers

#21

Congrats on the launch. For anyone looking for an open source community project without business aspirations in a much simpler and easier to audit format, have a look at SecureStore. It's encrypted and versioned secrets stored alongside your code in your git repo. Cross-language, cross-platform, with native libraries for different languages/frameworks. Useable by teams big and small, up until the point you want a sta…

Infisical's goal is to provide the main functionality to the community for free - only enterprise-level features will be paid. Frankly speaking, I don't believe in open-source projects without paid components (and this can be in different ways) - there have been so many examples of rug pulls for full FOSS just because maintainers are tired of running the project and there is no money to support it.

> Frankly speaking, I don't believe in open-source projects without paid components

Can you clarify your scope here? I mean, there are thousands of of active projects out there maintained by their creators or communities and are not monetized. They contribute to open source because they get enjoyment from working on the project, participating in a community around it, or derive meaning from putting something nifty into the world.

Making money in relation to open source projects is not a new idea, but the notion that every good idea needs to be monetized certainly is pretty recent.

Re: Show HN: Infisical – open-source secrets manager for developers

#22
Cool idea, and would love to take it for a spin!

Feedback: the MongoDB dependency is annoying, from an enterprise (self-hosting) perspective. Due to their licencing, you can't have a managed service provider host it for you (unless that provider is Mongo itself). I have not looked into what data you store, but I can't imagine it's that schema-less at this point, so perhaps it could be possible to store in an SQL database instead? Or in PostgreSQL via its JSON support?

Re: Show HN: Infisical – open-source secrets manager for developers

#23

In this context, what does the noun (secrets manager) and adjective (secret versioning) mean? Asking for purposes of learning. If this is laid out on a particular "for dummies" page, linkage would be appreciated ('secrets' being such a common word otherwise). I asked ChatGPT, but this appeared to be one of its "there-is-no-horsehead-in-Godfather" moments.

Yeah! It's not a common term - just something that we call it Secret can technically be any piece of information (e.g., API-key, credential). Though it may also include some non-sensitive data like environment variables Secret versioning is a feature which tells you how the secret was changed over time (you can think of it as google docs history); it also tells which user it was modified by

Thank you! I appreciate the education.

Re: Show HN: Infisical – open-source secrets manager for developers

#24

Congrats on the launch. For anyone looking for an open source community project without business aspirations in a much simpler and easier to audit format, have a look at SecureStore. It's encrypted and versioned secrets stored alongside your code in your git repo. Cross-language, cross-platform, with native libraries for different languages/frameworks. Useable by teams big and small, up until the point you want a sta…

The idea sounds good, but the Github is very buried.

Re: Show HN: Infisical – open-source secrets manager for developers

#26
From my experience (running Kubernetes at home), the biggest problem is that secrets managers are used to bootstrap clusters. Having to run three deployments (backend, frontend, mongodb) is a lot for a component that is supposed to bootstrap the cluster. Especially the MongoDB component is annoying, as it needs an username and password. That is why Vault from Hashicorp is so good, it supports many backends and provides distributed integrated storage (Raft), which is perfect for bootstrapping.

Re: Show HN: Infisical – open-source secrets manager for developers

#28

Cool idea, and would love to take it for a spin! Feedback: the MongoDB dependency is annoying, from an enterprise (self-hosting) perspective. Due to their licencing, you can't have a managed service provider host it for you (unless that provider is Mongo itself). I have not looked into what data you store, but I can't imagine it's that schema-less at this point, so perhaps it could be possible to store in an SQL data…

> Due to their licencing, you can't have a managed service provider host it for you (unless that provider is Mongo itself).

Had no idea!

Re: Show HN: Infisical – open-source secrets manager for developers

#29

Is this similar to envshare.dev?

Well, this project seems to reproduce one of our features. It seems like they only sync environment variables. I couldn’t find any information about their API, UI, integration with 3rd party services, RBAC, etc…

Re: Show HN: Infisical – open-source secrets manager for developers

#30

Cool idea, and would love to take it for a spin! Feedback: the MongoDB dependency is annoying, from an enterprise (self-hosting) perspective. Due to their licencing, you can't have a managed service provider host it for you (unless that provider is Mongo itself). I have not looked into what data you store, but I can't imagine it's that schema-less at this point, so perhaps it could be possible to store in an SQL data…

This is very interesting - we keep hearing about this pretty frequently. Will definitely look into this
Post reply on HN