All guides to deploy using docker mention typing your keys/credentials/secrets into the docker compose file, or use a .env or similar file, I’m wondering how secure is this and if there’s a better option.

Also, this has the issue of having to get into the server to manage them, remembering which file has each credential.

Is there a selfhostable secrets manager? I’ve only found proprietary/paid ones for large infrastructures and I just need it for a couple of my servers/projects.

  • lungdart@lemmy.ca
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    The suggestions here are good for production. Over used aws secret manager and hashicorp vault before and both did everything we needed.

    I find they’re too much firepower for selfhosted, and prefer pass

    https://github.com/peff/pass

    Simple commandline tool, backed by a gpg encrypted git repo. Perfect for small use cases!

    • NewDataEngineer@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      1 year ago

      I wish there was something between hashicorp vault and keepass. I want a nice simple UI that even my family could use with Terraform integration. Anyone know of such a program?

      • doeknius_gloek@feddit.de
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        I have no experience with terraform but Bitwarden has an API and CLI, so you might be able to script something with it?