Operations on Momo Engineering Journal/tags/operations/Recent content in Operations on Momo Engineering JournalMomo Engineering Journal/images/og-image.png/images/og-image.pngHugoen-usWed, 21 Oct 2026 11:26:56 -0600Rotating Secrets Without a Secret Server: Deriving, Versioning, and Hot-Reloading Keys/posts/054-secrets-management-key-rotation/Tue, 25 Aug 2026 03:25:35 +0000/posts/054-secrets-management-key-rotation/How momo manages encryption keys without a central secret server: a pluggable provider chain (env, then config file), a per-node versioned key registry in local storage, and rotation that promotes a new key without any downtime. Teaches: why a provider chain beats a single source, how key versioning enables online rotation, and when rotation is and is not worth the complexity.