If your server does not have a gpg key, you have to generate one. You can do so by running the following command:
gpg --gen-key
Then import the key to your local gpg keychain by running the following command:
On the server:
gpg --export-secret-keys --armor <email-of-the-server> > <path-to-the-key>
Then copy the key to your local machine and import it by running the following command:
gpg --import <path-to-the-key>
Then enroll the key to the git-secret tool by running the following command:
git secret tell <email-of-the-server>
git secret reveal
git secret hide -d
Finally, commit and push the changes to the repository.
To add automatic update of the confirguration contained in this repository, you can add the following to your crontab (run crontab -e
to edit your crontab):
# Update configuration
* * * * * bash /path/to/this/repository/.scripts/fetch-and-update.sh
This repository contains encrypted secrets thanks to git-secret(GitHub).
To decrypt the secrets, you need to have the git-secret
tool installed. You can install by following the instructions here.
After installing git-secret
, you can decrypt the secrets by running git secret reveal
(note that you need to be authorized to decrypt the secrets).