1= Fleet Secrets Management System2:order: 134== Overview56Secret management system is a built-in way to deploy secrets to remote hosts, similar to agenix and other systems.78Secrets are encrypted using system's host ssh key (/etc/ssh/ssh_host_ed25519_key), which is not required to build the9remote system/add secret to fleet configuration, fleet users are encrypting secrets using received public key instead,10they don't need the root access to receive the public encryption key.1112== Example1314[source,nix]15----16{17 secrets = {18 "my-secret" = {19 expectedOwners = [ "host1" "host2" ];20 regenerateOnOwnerAdded = true;21 generator = {mkImpureSecretGenerator}:22 mkImpureSecretGenerator {23 script = ''24 echo "secret content" | gh private -o $out/secret25 '';26 };27 };28 }29}30----