Commands to encrypt and decrypt secrets in git

Makefile

# Store encrypted secrets in git.
#
# 1. Put all your keys and passwords in a directory called secrets/
# 2. make encrypt_secrets, and enter a password twice.
# 3. git commit, push, pull, etc.
# 4. make decrypt_secrets, and enter the password again.
#

encrypt_secrets:
	tar cz secrets | openssl aes-256-cbc -out secrets.tgz.aes
	git add secrets.tgz.aes

decrypt_secrets:
	echo '/!\ About to erase any changes under secrets/ !'
	openssl aes-256-cbc -d -in secrets.tgz.aes | tar xz