1.7 KiB
Use secrets from keepass in your BundleWrap repo.
Installation
pip install bundlewrap-keepass
Setup
Create .bw_keepass.cfg
in your home. It should contain two lines: First
line should contain a path to your keepass file, second line may contain
your password.
If you're not comfortable putting your password into a plain-text file,
you may also use BW_KEEPASS_PASSWORD
in your environment variables.
You may also set BW_KEEPASS_FILE
in your environment to overwrite the
location of your keepass file. Please note that if you set the file path
in your environment, you must also set the password.
Usage
All function calls accept lists or strings as their arguments. If you
need to traverse into subdirectories in your keepass file, you have to
use |
as separator when not using lists.
For example, if you want to access the Password for 'mysite', which is located inside the directory 'bundlewrap', you can use either one of these:
bwkeepass.password('bundlewrap|mysite')
bwkeepass.password(['bundlewrap', 'mysite'])
Example nodes.py
:
import bwkeepass as keepass
nodes = {
'somenode': {
'metadata': {
'my_secret': keepass.password('my_identifier'),
},
},
}
Available Fields/Methods are:
bwkeepass.password()
for passwordsbwkeepass.username()
for usernamesbwkeepass.url()
for urlsbwkeepass.notes()
for notes
Note: This will insert a proxy object into your metadata, the actual secret is not retrieved until you convert it to a string (e.g. by inserting it in a template or calling str() explicitly).
© 2021 Franziska Kunsmann