// tag

#devops

2 posts
02
Security

Sopsy: Secrets in Git, Sealed by the Secure Enclave

A small Rust CLI that lets your team commit encrypted secrets straight into git, with the private key locked inside your Mac's Secure Enclave and released only by your fingerprint. Here's what it does, the excellent little bugs I stepped on getting there, and why I think it is a genuinely nice way to run secrets on a team.

2026.06.27
01
programming

The Big Switch How We Rebuilt Wanelo From Scratch And Lived To Tell About It

In this post we share the details of what we did and what we learned, in case someone out there ever finds themselves in a similar situation, weighing the risks of either working with a legacy stack or going full steam ahead with a rewrite.

2012.09.13