This is part of a series on building Orca , a single-binary orchestrator for the gap between Coolify and Kubernetes. Every orchestrator eventually has to answer: where do the secrets go? The default industry answer is "run a secret manager" - Vault, or a cloud KMS, or Infisical.
Source: [Dev.to](https://dev.to/mighty840/secrets-that-live-in-git-encrypted-no-vault-no-sidecar-4ia5)