This command-line application helps you manage sensitive environment variables and SSH information. Data is stored in JSON configuration files with sensitive information encrypted using a password. Also has other useful utilities like built in SMTP functionality.
Features:
- store environment variables so they are encrypted and then pass them into applications at runtime. For example, instead of storing your AWS credentials in plaintext, you can store them securely in demostack and then execute your AWS commands like this:
demostack run default aws s3 ls
ordemostack run aws default sts get-caller-identity
. - store your SSH keys with a password and then add them to your ssh-agent via temp files for 15 seconds while you login and then removes from the ssh-agent and the temp files. It also makes it very easy to generate your public key or authorized_key public key from your private key.
- set SMTP credentials and send emails with an optional file attachment.
- encrypt and decrypt single values with a password.
- change the password used to encrypt all sensitive items.
Keep in mind that that environment variables are still visible for all running applications on a Mac using ps eww <PID>
or on Linux using ps faux | grep 'PROCESSHERE'
and then cat /proc/PIDHERE/environ
.
# Login to AWS.
demostack login
# Add new SSH key.
demostack ssh new
# Logout to delete the local files.
demostack logout
# Add new SSH key to local filesystem.
demostack ssh new
# Login to AWS.
demostack login
# Copy the local files to AWS.
demostack push aws
# Logout to delete the local files.
demostack logout
# Login to AWS.
demostack login
# Copy files from AWS to local filesystem.
demostack pull aws
# Set the current storage mode to read and write to files on the local filesystem.
demostack config storage filesystem
# View SSH key on local filesystem.
demostack ssh view
Here is the syntax for the application:
usage: demostack [<flags>] <command> [<args> ...]
A command-line application utility for managing encrypted environment variables and SSH connection information. Also contains SMTP functionality.
Flags:
-h, --help Show context-sensitive help (also try --help-long and --help-man).
-v, --version Show application version.
Commands:
help [<command>...]
Show help.
run <arguments>...
Run a command with secure environment variables.
login
Login to the authentication service.
login-test
Test the AWS credentials from authentication service.
logout
Logout and delete local files.
pull aws
Copy files from AWS to filesystem.
push aws
Copy files from filesystem to AWS.
encrypt
Encrypt a variable with a password.
decrypt
Decrypt a variable with a password.
env set
Add or update a secure environment variable.
env unset
Remove a secure environment variable.
env view
View a secure environment variable.
ssh new
Set an SSH session and generate a new private key.
ssh set
Set an SSH session with an existing private key.
ssh unset
Remove an SSH session and private key.
ssh login
Set up a SSH session helper.
ssh view
View a SSH entry.
config view
View the settings for the application.
config change-password
Change the config password.
config storage filesystem
Set the storage to the local filesystem.
config storage aws
Set the storage to AWS.
email set
Set settings for the SMTP server for the application.
email send
Set settings for the SMTP server for the application.
sms
Send an SMS text message via AWS SNS.