Would it be worth using a secrets management system?

• sops

  150 15,160 9.0 Go

  Simple and flexible tool for managing secrets

  

maybe look at sops -- https://github.com/mozilla/sops extract the secrets to a single file. encrypt w/ sops, using your kms.

• git-secret

  22 3,621 5.7 Shell

  :busts_in_silhouette: A bash-tool to store your private data inside a git repository.

If you want a low config solution and not scared of gpg, https://git-secret.io/

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• bfg-repo-cleaner

  53 10,667 1.5 Scala

  Removes large or troublesome blobs like git-filter-branch does, but faster. And written in Scala

This is 100% the way to go, along with something like bfg to scrub the repo history. There's some complexity to overcome with sops if you're not in the cloud at all. Need to configure it to use age or PGP instead of a cloud kms but it's really not bad

• age

  214 15,341 4.9 Go

  A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

This is 100% the way to go, along with something like bfg to scrub the repo history. There's some complexity to overcome with sops if you're not in the cloud at all. Need to configure it to use age or PGP instead of a cloud kms but it's really not bad

Suggest a related project