Download this file
| 1 | #!/bin/sh |
| 2 | # lchat-env-install <name> — write stdin to /data/<name>.env (0600 lchat:lchat). |
| 3 | # The narrow, audited path for operators to place service/instance secrets |
| 4 | # without a root shell: sops -d file.env | ssh <box> sudo lchat-env-install <name> |
| 5 | set -eu |
| 6 | name="$1" |
| 7 | case "$name" in */*|*..*|"") echo "bad name" >&2; exit 1 ;; esac |
| 8 | umask 077 |
| 9 | t=$(mktemp /data/.envtmp.XXXXXX) |
| 10 | cat > "$t" |
| 11 | chown lchat:lchat "$t" |
| 12 | chmod 600 "$t" |
| 13 | mv "$t" "/data/$name.env" |
| 14 | echo "wrote /data/$name.env" |
| 15 | |
amadan