Compare commits
No commits in common. "bec2e50a670107e6bf9b15a974e82c848e4558f0" and "5bcaaf7d889f90f3b7ebaf189768d99afef0108e" have entirely different histories.
bec2e50a67
...
5bcaaf7d88
1 changed files with 0 additions and 6 deletions
|
|
@ -2150,12 +2150,6 @@ disinto_secrets() {
|
||||||
fi
|
fi
|
||||||
_secrets_ensure_sops
|
_secrets_ensure_sops
|
||||||
encrypt_env_file "$vault_env_file" "$vault_enc_file"
|
encrypt_env_file "$vault_env_file" "$vault_enc_file"
|
||||||
# Verify decryption works before removing plaintext
|
|
||||||
if ! sops -d "$vault_enc_file" >/dev/null 2>&1; then
|
|
||||||
echo "Error: failed to verify .env.vault.enc decryption" >&2
|
|
||||||
rm -f "$vault_enc_file"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
rm -f "$vault_env_file"
|
rm -f "$vault_env_file"
|
||||||
echo "Migrated: .env.vault -> .env.vault.enc (plaintext removed)"
|
echo "Migrated: .env.vault -> .env.vault.enc (plaintext removed)"
|
||||||
;;
|
;;
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue