ft: sops-nix + secrets

README.md

@@ -3,7 +3,6 @@
 NixOS configuration for my three main machines (nixbook, nixpad, tuxcomp).
 
 
-<!-- TODO: rewrite rest of this file  -->
 ## Layout
 
 | Path | Contents |
@@ -45,12 +44,3 @@ To add a machine, give it a key before its first boot with
 `mkdir -p -m 700 ~/.config/sops/age && age-keygen -o ~/.config/sops/age/keys.txt`,
 put the public key this prints in `.sops.yaml`, and run `sops updatekeys` on
 every `.bin` from a machine that can already decrypt them.
-
-`thunderbird-creds.bin` isn't text: it's a tarball of Thunderbird's
-`logins.json` and `key4.db`, and it only seeds profiles that have no
-`logins.json` yet. To update it, change the password in Thunderbird, close
-Thunderbird, and update the tarball:
-
-```sh
-tar -C ~/.thunderbird/main -cf - logins.json key4.db | sops encrypt --filename-override secrets/thunderbird-creds.bin --output secrets/thunderbird-creds.bin /dev/stdin
-```