Earlier quoted context omitted.
Do you have an example of such a script?
I will see if I can open source it.
What would be great!
Ask HN: What tools should I use to manage secrets from env files?
81–83 of 83 posts
Re: Ask HN: What tools should I use to manage secrets from env files?
#82This is an interesting alternative to password manager, esp. if you want to version control your secrets https://github.com/getsops/sops
thanks for letting me know about sops! looks useful for this
Re: Ask HN: What tools should I use to manage secrets from env files?
#83Earlier quoted context omitted.
So what you see when you look at the repo in Github et al is the encrypted file and locally you see the file unencrypted? That's neat, a bit like ansible-vault but less of a hassle for the user.
yes, exactly right. it's an encrypted binary on github, but locally (provided you've decrypted it) it'll be unencrypted. If you edit the file locally, it automatically encrypts. It's a neat bit of tech.
so are they 2 separate files? because otherwise how will the system read it unencrypted? (such as an env file)
I ask because I'm currently using a scheme where I have a .secrets env file that is .gitignore'd from the repo but it has a corresponding .secrets.gpg file which isn't, but it's a pain to synchronize these; I suppose this is the problem `sops` solves...