fnox sync

• Usage: fnox sync [FLAGS] [KEYS]…

Sync secrets from remote providers to a local encryption provider

Arguments

• [KEYS]… — Only sync these specific secret keys

Flags

• -f --force — Skip confirmation prompt
• -g --global — Write to global config (~/.config/fnox/config.toml)
• -n --dry-run — Show what would be done without making changes
• -p --provider <PROVIDER> — Target encryption provider (defaults to default_provider)
• -s --source <SOURCE> — Only sync secrets from this source provider
• --filter <FILTER> — Only sync matching secrets (regex pattern)
• --local-file — Write synced secrets to the local override file next to the config file: fnox.local.toml, or .fnox.local.toml when that file exists or the config is .fnox.toml
• -h --help — Print help

Examples

Use a configured encryption provider as the target. --local-file writes a personal cache next to the project config; add that file to .gitignore. Run sync again after source values change.

fnox sync --provider sync-age --local-file --dry-run
fnox sync --provider sync-age --local-file
fnox sync --provider sync-age --local-file DATABASE_URL

Related

• Sync a local cache
• Global options, including profile selection and non-interactive mode.