Skip to content

Latest commit

 

History

History
49 lines (32 loc) · 1.33 KB

README.md

File metadata and controls

49 lines (32 loc) · 1.33 KB
Raw

Simple CLI for SOPS with age and 1password

This simple bash script is a wrapper for SOPS encryption with a age key saved in 1password. You can directly encrypt and decrypt files without copy the public/private key onto the machine. The script uses the 1password-host integration, where you have to be logged in (see Dependencies).

⚠️ At the moment, the script only supports the in-place parameter of SOPS and will therefore encrypt/decrypt a file directly in place!

Dependencies

Usage

sops-age-op --help
  • KEY_PATH is the path to the key in the 1password vault in one of the following formats:
    • op://vault/title (in this case, the defualt field name is password)
    • op://vault/title/field
    • op://vault/title/section/field

Encryption

Encrypt a file:

./sops-age-op -e -k KEY_PATH [ FILE ]

Decryption

Decrypt a sops file:

./sops-age-op -d -k KEY_PATH [ FILE ]

Generate a new key

Generate a new age key and store it in the 1password vault. The type of the new item will be Password.

./sops-age-op -c -t [ TAGS ] -k KEY_PATH