hiera-eyaml-secretbox

NaCl secretbox encryption backend for the hiera-eyaml module.

Motivation

censored

Requirements

You need RbNaCl for the NaCl operations, which in turn depends on libsodium:

$ gem install rbnacl

How to use

Encrypting and editing encrypted data

Once installed you can create encrypted hiera-eyaml blocks that are encrypted using Secret Box.

$ eyaml encrypt -n secretbox -s "A secret string to encrypt"

Use eyaml --help for more details or look at the hiera-eyaml docs.

Configuring hiera

Assuming you have a working hiera and hiera-eyaml then you need to configure a path for the :secretbox_private_key: and :secretbox_public_key: file locations.