fnox edit

• Usage: fnox edit [KEY]

Edit the config file, or one secret, with values decrypted

Without KEY, decrypts or fetches every secret in the config file, across all profiles, into a private temporary copy and opens it in $EDITOR (then $VISUAL, then vi, or notepad on Windows). When the editor exits, fnox stores each new or changed value with its provider and writes the file back, keeping your comments and formatting. Unchanged values keep their existing ciphertext.

With KEY, only that secret's resolved value is written, raw and without TOML, to a private temporary file for the active profile. If you change it, fnox stores the new value with the secret's provider as fnox set --from-file does, keeping its other settings. The other secrets are not decrypted.

The editor command may include arguments, such as EDITOR="code --wait". Secrets from read-only providers are shown but cannot be changed. fnox edits the file named by -c (default: fnox.toml in the current directory).

Arguments

• [KEY] — Secret to edit on its own; omit to edit the whole config file

Flags

• -h --help — Print help

Examples

Edit fnox.toml in your editor

fnox edit

Use a specific editor

EDITOR=nano fnox edit

Use an editor command with arguments

EDITOR="code --wait" fnox edit

Edit one secret from the work profile

fnox -P work edit KUBECONFIG

See also

• Configuration reference