Basic idea is:
- - Encrypt screts using multiple users's OpenPGP public keys and commit the output in a git repository.
+ - Encrypt screts using multiple users's OpenPGP public keys and commit the
+ output in a git repository.
- Let users keep it in sync with the repository and the secrets are shared :)
With theses scripts, the workflow is more or less like this:
- - You have a git repo for secret keys.
+ - You have a git repo used to store secrets encrypted with GnuPG.
- You run the "encrypt" command and paste your private key to this
command (so no plaintext is written to disk).