dotsec 5.0.0-beta.28d7cb4 → 5.0.0-beta.2ff5bbc
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +51 -0
- package/package.json +9 -9
package/README.md
ADDED
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
# dotsec
|
|
2
|
+
|
|
3
|
+
`.env` files, encrypted and committed to git.
|
|
4
|
+
|
|
5
|
+
dotsec encrypts your secrets into a `.sec` file — committed alongside your code as the single source of truth. Decrypt at runtime with no secrets ever written to disk.
|
|
6
|
+
|
|
7
|
+
## Install
|
|
8
|
+
|
|
9
|
+
```bash
|
|
10
|
+
npm install -g dotsec
|
|
11
|
+
```
|
|
12
|
+
|
|
13
|
+
## Quick start
|
|
14
|
+
|
|
15
|
+
```bash
|
|
16
|
+
dotsec set API_KEY sk-live-xxx --encrypt # creates .sec + keypair on first run
|
|
17
|
+
dotsec set PORT 3000 # plaintext variable
|
|
18
|
+
dotsec run -- node server.js # inject decrypted vars into your process
|
|
19
|
+
```
|
|
20
|
+
|
|
21
|
+
No AWS account. No config file. No setup step. `.sec` goes into git, `.sec.key` stays out.
|
|
22
|
+
|
|
23
|
+
## Common commands
|
|
24
|
+
|
|
25
|
+
```bash
|
|
26
|
+
dotsec set KEY value --encrypt # add/update an encrypted variable
|
|
27
|
+
dotsec import -y # .env → .sec (auto-detect types)
|
|
28
|
+
dotsec run -- <command> # run with decrypted env vars injected
|
|
29
|
+
dotsec show --reveal # display decrypted contents
|
|
30
|
+
dotsec export -o .env # .sec → .env
|
|
31
|
+
dotsec validate # check types and constraints
|
|
32
|
+
dotsec extract-schema # extract directives → dotsec.schema
|
|
33
|
+
dotsec schema export --format ts # generate TypeScript types
|
|
34
|
+
dotsec rotate-key # re-encrypt all values with a new DEK
|
|
35
|
+
```
|
|
36
|
+
|
|
37
|
+
## CI/CD
|
|
38
|
+
|
|
39
|
+
Set the private key as an environment variable — no file writes needed:
|
|
40
|
+
|
|
41
|
+
```bash
|
|
42
|
+
export DOTSEC_PRIVATE_KEY="AGE-SECRET-KEY-1..."
|
|
43
|
+
```
|
|
44
|
+
|
|
45
|
+
## Documentation
|
|
46
|
+
|
|
47
|
+
**[Docs →](https://jpwesselink.github.io/dotsec-rs)**
|
|
48
|
+
|
|
49
|
+
## License
|
|
50
|
+
|
|
51
|
+
MIT — [github.com/jpwesselink/dotsec-rs](https://github.com/jpwesselink/dotsec-rs)
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "dotsec",
|
|
3
|
-
"version": "5.0.0-beta.
|
|
4
|
-
"description": "Encrypt
|
|
3
|
+
"version": "5.0.0-beta.2ff5bbc",
|
|
4
|
+
"description": "Encrypt your .env into a .sec file — committed to git, decrypted at runtime",
|
|
5
5
|
"bin": {
|
|
6
6
|
"dotsec": "bin/dotsec.js"
|
|
7
7
|
},
|
|
@@ -11,12 +11,12 @@
|
|
|
11
11
|
"LICENSE"
|
|
12
12
|
],
|
|
13
13
|
"optionalDependencies": {
|
|
14
|
-
"@dotsec/linux-x64-gnu": "5.0.0-beta.
|
|
15
|
-
"@dotsec/linux-arm64-gnu": "5.0.0-beta.
|
|
16
|
-
"@dotsec/darwin-x64": "5.0.0-beta.
|
|
17
|
-
"@dotsec/darwin-arm64": "5.0.0-beta.
|
|
18
|
-
"@dotsec/win32-x64-msvc": "5.0.0-beta.
|
|
19
|
-
"@dotsec/win32-arm64-msvc": "5.0.0-beta.
|
|
14
|
+
"@dotsec/linux-x64-gnu": "5.0.0-beta.2ff5bbc",
|
|
15
|
+
"@dotsec/linux-arm64-gnu": "5.0.0-beta.2ff5bbc",
|
|
16
|
+
"@dotsec/darwin-x64": "5.0.0-beta.2ff5bbc",
|
|
17
|
+
"@dotsec/darwin-arm64": "5.0.0-beta.2ff5bbc",
|
|
18
|
+
"@dotsec/win32-x64-msvc": "5.0.0-beta.2ff5bbc",
|
|
19
|
+
"@dotsec/win32-arm64-msvc": "5.0.0-beta.2ff5bbc"
|
|
20
20
|
},
|
|
21
21
|
"publishConfig": {
|
|
22
22
|
"access": "public"
|
|
@@ -26,7 +26,7 @@
|
|
|
26
26
|
"type": "git",
|
|
27
27
|
"url": "https://github.com/jpwesselink/dotsec-rs.git"
|
|
28
28
|
},
|
|
29
|
-
"homepage": "https://github.
|
|
29
|
+
"homepage": "https://jpwesselink.github.io/dotsec-rs",
|
|
30
30
|
"bugs": {
|
|
31
31
|
"url": "https://github.com/jpwesselink/dotsec-rs/issues"
|
|
32
32
|
},
|