dotgpg

A tool for backing up and versioning production secrets.

Usage

• Backup secrets: dotgpg
• Versioning: dotgpg key -n
• Read encrypted files: gpg --decrypt FILE
• Edit encrypted files: vim- gnupg with autocmd User GnuPG let b:GPGOptions += ["sign"]

Security

• Files are unreadable to an attacker if:
  • A file encrypted by GnuPG cannot be decrypted except by someone with access to a recipient's private key.
  • No-one has access to your GPG private key.

Passphrase Change

gpg --edit-keys [email protected] passwd

Revoking Access

Remove users who no longer need access: dotgpg rm [email protected]

Integration with Git

• Add the following to your git config: [diff "gpg"] textconv = dotgpg unsafe_cat [merge "gpg"] name = dotgpg merge driver = "dotgpg merge %O %A %B"
• Add the following to your git attributes: *.gpg diff=gpg merge=gpg

Note

Please email if you have feedback on the security section.

> Visit dotgpg Website <