setec

setec is a secrets management service that uses Tailscale for access control.

After using a number of established secrets tools, we built setec for our internal needs at Tailscale. We use it daily for managing secrets used across our infrastructure.

Because it is built with tsnet and connects natively to our tailnet, access is managed through ACLs. Even better, we can drill down to groups of secrets using ACL Grants, limiting access to well-defined sets of users or even to devices that bear a particular tag.