.gitignore

secrets/*

post-checkout

#!/bin/bash

mkdir -p secrets

for fullname in cryptsecrets/*; do
    filename=$(basename -- "$fullname")
    extension="${filename##*.}"
    filename="${filename%.*}"
    openssl rsautl -decrypt -inkey ~/.ssh/aws-it.pem -in "$fullname" > secrets/"$filename"."$extension"
done

pre-commit

#!/bin/bash

mkdir -p cryptsecrets

for fullname in secrets/*; do
    filename=$(basename -- "$fullname")
    extension="${filename##*.}"
    filename="${filename%.*}"
    cat "$fullname" | openssl rsautl -encrypt -pubin -inkey ~/.ssh/aws-it.pem -ssl > cryptsecrets/"$filename"."$extension"
done

git add -f cryptsecrets/*