nvim-sops

nvim-sops is a lua plugin for neovim that wraps the SOPS commandline tool.

It was partly inspired by the vscode extension by sinageos though it does not yet implement any of the realtime editing features and automatic creation features.

Features

• Exposes SopsEncrypt and SopsDecrypt commands that can be used in neovim or bound to keymaps
• These commands perform an in-place encryption or decryption, saving and refreshing the buffer
• It is possible to add settings to override your AWS_PROFILE, SOPS_AGE_KEY_FILE or GOOGLE_APPLICATION_CREDENTIALS within neovim
• It also has a debug option to print much more information

Requirements

• The plugin expects you to have the sops commandline tool. You can get it here: https://github.com/mozilla/sops/releases
• It expects the binary to be on your $PATH, but optionally it can set a custom path in the opts
• It also expects you to have your preferred key set up, but it leans on the env vars to get this

Installation

lazy.nvim

{
  'lucidph3nx/nvim-sops',
  event = { 'BufEnter' },
  opts = {
    -- your configuration comes here
    -- or leave it empty to use the default settings
    -- refer to the configuration section below
  }
}

packer

use {
  'lucidph3nx/nvim-sops',
  config = function()
    require('nvim_sops').setup {
      -- your configuration comes here
      -- or leave it empty to use the default settings
      -- refer to the configuration section below
    }
  end
}

Configuration

nvim-sops comes with the following defaults

{
    enabled = true
    debug = false
    binPath = 'sops' -- assumes its on $PATH
    defaults = { -- overriding any env vars as needed
        awsProfile = 'AWS_PROFILE',
        ageKeyFile = 'SOPS_AGE_KEY_FILE',
        gcpCredentialsPath = 'GOOGLE_APPLICATION_CREDENTIALS',
    }
}

Keymaps

nvim-sops doesnt come with any default keybindings, it only has the vim commands.

Personally, I use the following keys and include them in my lazy.nvim definition above

  keys = {
    { '<leader>ef', vim.cmd.SopsEncrypt, desc = '[E]ncrypt [F]ile' },
    { '<leader>df', vim.cmd.SopsDecrypt, desc = '[D]ecrypt [F]ile' },
  },