Protect vault secret with GPG

Encrypting the vault password with GPG protects the key when stored on disk and allows it to be accessed non-interactively, as long as the GnuPG agent is set up correctly.
2018-01-29 14:53:57 -06:00
parent 940ea5efb2
commit 20fb830eda
3 changed files with 5 additions and 0 deletions
--- a/.vault-secret.sh
+++ b/.vault-secret.sh
@@ -0,0 +1,2 @@
+#!/bin/sh
+exec gpg --quiet --batch --decrypt "${0%.sh}.gpg"