GitHub - tillcarlos/touchenv: Store ENV in the Macos keychain, get them on demand

Show HN: Touchenv – store ENV master keys in macOS keychain

Store ENV in the Macos keychain, get them on demand - tillcarlos/touchenv

3 points by tillcarlos 219 days ago github.com 1 comments

Summary not yet generated for this article.

Original Text

Hey HN

I am used to store my secrets in Rails 8 fashion in so-called encrypted credentials, and committed to git.

The problem became: where to store the RAILS_MASTER_KEY securely?

Many people use 1password CLI, which can pull the keys out, but I didn't want to start using 1password.

Touchenv is a quick repo I spun up, which works surprisingly well.

e.g. deploying from localhost:

  - pnpm stagedeploy.  
  - starts touchenv exec .env -- kamal deploy. 
  - Touch Id prompt comes up. I have to confirm it with my fingerprint. 
  - Deploy runs.

My next step is to make a similar thing for my CI, or just use the KWS from AWS. I'll look into that soon.

Original Text

Comments (1 of ) ⌛