dustin/configpolicy
1
1
Fork 0
Code Issues Releases Activity

Protect vault secret with GPG

Browse Source 
Encrypting the vault password with GPG protects the key when stored on
disk and allows it to be accessed non-interactively, as long as the
GnuPG agent is set up correctly.
This commit is contained in:
Dustin
2018-01-29 14:53:57 -06:00
parent 940ea5efb2
commit 20fb830eda
3 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored
View File

@@ -1 +1,2 @@
/.vault-secret.gpg
.fact-cache .fact-cache

2
.vault-secret.sh Executable file
View File

@@ -0,0 +1,2 @@
#!/bin/sh
exec gpg --quiet --batch --decrypt "${0%.sh}.gpg"

2
ansible.cfg
View File

@@ -6,3 +6,5 @@ inventory = hosts
gathering = smart gathering = smart
fact_caching = jsonfile fact_caching = jsonfile
fact_caching_connection = .fact-cache fact_caching_connection = .fact-cache
vault_password_file = .vault-secret.sh