Struct SecretsConfig 

pub struct SecretsConfig {
    pub identity: String,
    pub recipients: Vec<String>,
    pub vault: Option<VaultConfig>,
}

[secrets] — wires the age encryption pipeline into apply.

identity is the path to your local age secret key file (NOT committed). recipients is the public-key list every new encryption is wrapped to — at minimum, the public key matching identity, and any additional machines / users that should also be able to decrypt. yui defaults the identity path to ~/.config/yui/age.txt and treats an empty recipients list as “secrets feature off”.

Fields

identity: String

Path to the X25519 secret key used by apply to decrypt *.age files. Plain (AGE-SECRET-KEY-1…) text, gitignored. Default ~/.config/yui/age.txt.

recipients: Vec<String>

Public keys that *.age files are encrypted to. X25519 (age1…) is the everyday case and is what yui secret init adds. Plugin recipients (age1<plugin>1…) are also accepted — yui doesn’t ship first-class commands for them, but if you hand-write a YubiKey / FIDO2 / TPM / Secure Enclave / 1P recipient here it’ll be honored, and the matching age-plugin-* binary on $PATH lets age itself decrypt those stanzas. (yui’s apply uses the X25519 in identity only, so plugin recipients add a parallel decrypt path without slowing apply down.)

Empty = secrets feature off.

vault: Option<VaultConfig>

Vault provider config — when set, yui secret store / yui secret unlock use it to ferry the X25519 identity across machines via Bitwarden / 1Password instead of asking the user to copy ~/.config/yui/age.txt by hand. Off when absent.

Implementations

impl SecretsConfig

pub fn enabled(&self) -> bool

[secrets] is “on” once the user has populated recipients (which yui secret init does). Until then, the apply walker won’t even look for *.age files — keeps every existing dotfiles repo behaving exactly the same as before this PR.

Trait Implementations

impl Clone for SecretsConfig

fn clone(&self) -> SecretsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecretsConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecretsConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.