Super simple shell scripts we use at www.rainforestqa.com for encrypting / decrypting / updating our Heroku apps with private environment variables

decrypt.sh

#!/bin/bash
gpg qa.txt.asc
gpg staging.txt.asc
gpg production.txt.asc

reencrypt.sh

#!/bin/bash
gpg --yes --recipient russ --recipient simon -aes qa.txt
gpg --yes --recipient russ --recipient simon -aes staging.txt
gpg --yes --recipient russ --recipient simon -aes production.txt

update_production.sh

#!/bin/bash
gpg -o production.txt -d production.txt.asc
heroku config:set $(sed '/^#/d' production.txt) --app <production-app-name>