magic_recipes_two 0.0.7 → 0.0.8
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 6e23444aecb6394830e7bb6c422b8dcc23348c4e
|
4
|
+
data.tar.gz: f6b5bc734ac60d908bfc64054ce419a46d83dc8e
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 1a9807d60cb9bcfb13ee6c704416fc6097c3b416925d1dcb8284c1ab2a5c195579a7fbd1abcef3c1d817e0dfcb8c6e406b702e843a04423e2c521a5c23dd2de5
|
7
|
+
data.tar.gz: 3bf403c118f0484e0899bdeadfdfcd13d80e3f5da17e0d54a0cae197845c646ce095c6c990ddbb9c5cc71f0738cce6aa02f31e94e188b2b7d37dbeeb74eefbc5
|
@@ -6,10 +6,9 @@ namespace :load do
|
|
6
6
|
set :secrets_roles, -> { :app }
|
7
7
|
set :secrets_profile, -> { "profile" } # "profile" | "bashrc"
|
8
8
|
set :secrets_key_base, -> { generate_secrect_key }
|
9
|
-
set :secrets_token, -> { generate_secrect_key }
|
10
9
|
set :secrets_key_name, -> { "#{ fetch(:application) }_#{ fetch(:stage) }_SECRET_KEY_BASE".gsub(/-/, "_").gsub(/[^a-zA-Z_]/, "").upcase }
|
11
|
-
set :secrets_token_name, -> { "#{ fetch(:application) }_#{ fetch(:stage) }_SECRET_TOKEN".gsub(/-/, "_").gsub(/[^a-zA-Z_]/, "").upcase }
|
12
10
|
set :secrets_user_path, -> { "/home/#{fetch(:user)}" }
|
11
|
+
set :secrets_set_both, -> { false }
|
13
12
|
end
|
14
13
|
end
|
15
14
|
|
@@ -27,20 +26,47 @@ namespace :secrets do
|
|
27
26
|
end
|
28
27
|
|
29
28
|
|
30
|
-
desc "set secret-key in .bashrc"
|
31
|
-
task :
|
29
|
+
desc "set secret-key in .profile or .bashrc"
|
30
|
+
task :profile do
|
32
31
|
on release_roles fetch(:secrets_roles) do
|
33
32
|
within fetch(:secrets_user_path) do
|
34
33
|
execute :sudo, "echo 'export #{fetch(:secrets_key_name)}=#{fetch(:secrets_key_base)}' | cat >> .#{fetch(:secrets_profile)}"
|
35
|
-
|
34
|
+
if fetch(:secrets_set_both, false)
|
35
|
+
execute :sudo, "echo 'export SECRET_KEY_BASE=#{fetch(:secrets_key_base)}' | cat >> .#{fetch(:secrets_profile)}"
|
36
|
+
end
|
37
|
+
end
|
38
|
+
end
|
39
|
+
end
|
40
|
+
|
41
|
+
|
42
|
+
desc "export secret-key in actual bash env"
|
43
|
+
task :export do
|
44
|
+
on release_roles fetch(:secrets_roles) do
|
45
|
+
within fetch(:secrets_user_path) do
|
36
46
|
execute "export #{fetch(:secrets_key_name)}=#{fetch(:secrets_key_base)}"
|
37
|
-
|
47
|
+
if fetch(:secrets_set_both, false)
|
48
|
+
execute "export SECRET_KEY_BASE=#{fetch(:secrets_key_base)}"
|
49
|
+
end
|
38
50
|
end
|
39
51
|
end
|
40
52
|
end
|
41
53
|
|
54
|
+
|
55
|
+
desc "export secret-key in actual bash env"
|
56
|
+
task :printenv do
|
57
|
+
on release_roles fetch(:secrets_roles) do
|
58
|
+
within fetch(:secrets_user_path) do
|
59
|
+
execute "printenv"
|
60
|
+
execute :echo, "$SECRET_KEY_BASE"
|
61
|
+
execute :echo, "$#{fetch(:secrets_key_name)}"
|
62
|
+
end
|
63
|
+
end
|
64
|
+
end
|
65
|
+
|
66
|
+
|
42
67
|
desc 'secrets setup task (upload and set)'
|
43
68
|
task :setup do
|
69
|
+
invoke "secrets:profile"
|
44
70
|
invoke "secrets:export"
|
45
71
|
invoke "secrets:upload"
|
46
72
|
end
|