hst337

hst337

SecretVault :lock:

https://github.com/spawnfest/secret_vault
All-in-one solution for storing your secrets inside repository.

Overview

It is a lightweight zero-dependency solution for Elixir projects to store secrets inside your repository that my friend and I made during spawnfest 2022.

Features

  1. No external dependencies, pure Elixir
    You don’t need to setup and external binaries or services. And you can extend this library in plain Elixir.

  2. Mix-aware.
    Secrets are separated per-environment and there is a bunch of useful mix tasks to manipulate these secrets. Building releases with SecretVault is nothing different from building regular release.

  3. Easy to use.
    There is a straightforward tutorial for simple installation, and the whole project is well documented.

  4. Secure.
    Uses :crypto’s aes256gcm cipher by default. Plus there is a special task for performing very basic but useful audit of your secrets to detect weak or similar passwords.


Sidenote

This project is not available on hex.pm yet, but we’re planning to release a version as a soon as spawnfest evaluation finishes.

Showing Posts 1 to 10

derpycoder

derpycoder

This is awesome.

derpycoder

derpycoder

I meant it when I said this is awesome!!

Here’s why:
https://github.com/livebook-dev/livebook/issues/1340

LiveBook has this open ticket about storing secret directly on a markdown file, which people generally push to Git repo.

So I was hoping this project of yours fit the bill. :upside_down_face:

@hst337 please reach out to @josevalim.

hst337

hst337 OP

1.0.0 released in hex :tada:

Some after-spawnfest fixes were added, documentation, errors and warnings were improved to provide first-class developer experience

https://github.com/SecretVault-elixir/secret_vault

By the way

This project won second place in Spawnfest 2022, and I want to thank organizers and sponsors for the hackaton and generous prizes!

SirWerto

SirWerto

Hello @hst337

Cool project :slight_smile: , just one thing:

When I click on the link under Usage section, I am redirected to a 404 GitHub with the next prompt
image

Don’t know if it is still on process XD

hst337

hst337 OP

Try to click from here: SecretVault v1.2.3 — Documentation

SirWerto

SirWerto

Working!! Thanks :slight_smile:

derpycoder

derpycoder

Hey @hst337, congratulations on your win.

Well deserved. :clap:

Will it be added to LiveBook, to seamlessly store env secrets directly on .livemd files?

hst337

hst337 OP

Not for me to tell

benonymus

benonymus

Hey,

This seems really cool!

I tried to add it to a project, but I am struggling with some problems.

When I use SecretVault.Config.fetch_from_current_env/1 the returned config is for prod always. If I use fetch_from_env with dev (which is the env I am in) it works.

Could you elaborate on practical examples for the library integration?

As a test I tried to put my database password in the vault and use it to start the db.
I followed the docs, and tried to read the value in the config.exs and in the runtime.exs files, but it doesn’t seem to work.
How would one go about that? Is that even an intended use case?

Thanks

hst337

hst337 OP

Ooh, I am really sorry for this, it is a bug I just forgot to fix. I’ll release patch version right now, and I am still planning add more practical tests during this week


UDP, check out the 1.0.1

Where Next? Top

Trending in Announcing Top

woylie
Flop is an Elixir library that applies filtering, ordering and pagination parameters to your Ecto queries. offset-based pagination with...
New
MRdotB
I needed to reuse React components from my Chrome extension in my Phoenix/LiveView backend. I noticed that for Svelte/Vue, there are live...
New
marciok
Hi there! We created Gust: A task orchestrator inspired by Airflow. For those who have never heard about Aiflow, it’s a Python-based wor...
New
fuelen
Hi all! I want to present a small library which provides a mix task for generating an Entity-Relationship Diagram for Ecto schemas. You...
New
anuaralfetahe
Hello Published a new library - ProcessHub! ProcessHub is a library designed to manage process distribution within the Elixir cluster. ...
New
jimsynz
Beam Bots (or just BB for short) is a framework for building fault-tolerant robotics applications in Elixir using familiar OTP patterns. ...
New
Dmk
Xamal is a deployment tool for Elixir apps that deploys native releases to bare metal servers over SSH. It’s a port of GitHub - basecamp/...
New

Other Trending Topics Top

mudasobwa
I am happy to introduce the very α version of the new programming language compiled to BEAM. Welcome Cure. It has literally three kille...
New
webofbits
With AI doing more of the implementation work, I’ve been wondering how much coding I should deliberately keep doing myself. My main conc...
#ai
New
AstonJ
This showed up on my feed.. anyone heard of it? Just hype? Ox Alpha is a reasoning model designed for coding, sustained ag...
New
sergio
It’s not that it’s vocabulary is too advanced. It’s something worse. I get lost trying to follow even a paragraph written by Claude. It’...
New
sorenone
Today we’re releasing Oban for Python. Not an Oban client in Python. Not a pythonx wrapper embedded in Elixir. Nope, it’s a fully operati...
New
akoutmos
@hugobarauna, Dr. Dimitrios Koutmos (my brother) and I (Alex Koutmos) have been hard at work on writing a book on how you can use Elixir ...
New

We're in Beta

About us Mission Statement

Options

Thread Display Mode




Thread Preview

Skip Thread Previews