deemanone/padelnomics
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: add secrets-encrypt-dev/prod targets to match template

Browse Source
This commit is contained in:
Deeman
2026-02-26 20:27:35 +01:00
parent 0c7b419fea
commit 88378cbfa7
1 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
Makefile
View File

@@ -4,7 +4,8 @@ SOPS_DOTENV := sops --input-type dotenv --output-type dotenv
.PHONY: help dev init-landing-seeds css-build css-watch \ .PHONY: help dev init-landing-seeds css-build css-watch \
secrets-decrypt-dev secrets-decrypt-prod \ secrets-decrypt-dev secrets-decrypt-prod \
secrets-edit-dev secrets-edit-prod secrets-edit-dev secrets-edit-prod \
secrets-encrypt-dev secrets-encrypt-prod
help: help:
@echo "Available targets:" @echo "Available targets:"
@@ -16,6 +17,8 @@ help:
@echo " secrets-decrypt-prod Decrypt .env.prod.sops → .env" @echo " secrets-decrypt-prod Decrypt .env.prod.sops → .env"
@echo " secrets-edit-dev Edit .env.dev.sops in \$$EDITOR" @echo " secrets-edit-dev Edit .env.dev.sops in \$$EDITOR"
@echo " secrets-edit-prod Edit .env.prod.sops in \$$EDITOR" @echo " secrets-edit-prod Edit .env.prod.sops in \$$EDITOR"
@echo " secrets-encrypt-dev Encrypt .env (plaintext) → .env.dev.sops"
@echo " secrets-encrypt-prod Encrypt .env (plaintext) → .env.prod.sops"
# ── Dev environment ─────────────────────────────────────────────────────────── # ── Dev environment ───────────────────────────────────────────────────────────
@@ -43,8 +46,11 @@ css-watch: bin/tailwindcss
$(TAILWIND) -i web/src/padelnomics/static/css/input.css -o web/src/padelnomics/static/css/output.css --watch $(TAILWIND) -i web/src/padelnomics/static/css/input.css -o web/src/padelnomics/static/css/output.css --watch
# ── Secrets (SOPS + age) ───────────────────────────────────────────────────── # ── Secrets (SOPS + age) ─────────────────────────────────────────────────────
# Requires: sops (https://github.com/getsops/sops) + age (https://github.com/FiloSottile/age)
# Keys config: .sops.yaml
# .env.*.sops files use dotenv format but sops can't infer from the extension, # .env.*.sops files use dotenv format but sops can't infer from the extension,
# so we pass --input-type / --output-type explicitly. # so we pass --input-type / --output-type explicitly.
# Encrypted files are safe to commit to git.
secrets-decrypt-dev: secrets-decrypt-dev:
$(SOPS_DOTENV) --decrypt .env.dev.sops > .env $(SOPS_DOTENV) --decrypt .env.dev.sops > .env
@@ -59,3 +65,11 @@ secrets-edit-dev:
secrets-edit-prod: secrets-edit-prod:
$(SOPS_DOTENV) .env.prod.sops $(SOPS_DOTENV) .env.prod.sops
secrets-encrypt-dev:
$(SOPS_DOTENV) --encrypt --in-place .env.dev.sops
@echo "Encrypted .env.dev.sops (commit this file)"
secrets-encrypt-prod:
$(SOPS_DOTENV) --encrypt --in-place .env.prod.sops
@echo "Encrypted .env.prod.sops (commit this file)"