Use git-crypt for storing and reading secrets

[paulcsmith]

https://www.agwa.name/projects/git-crypt/ Transparent file encryption. Can use symmetric keys so devs can easily share it, or use GPG.

Add some lucky tasks to get it working well, make it easy to publish the key to Heroku on setup

lucky secrets.encrypt_file # Add file(s) to .git-attributes
lucky secrets.sync_key prod # Pushes the key as an env var on Heroku

• http://www.twinbit.it/en/blog/storing-sensitive-data-git-repository-using-git-crypt
• https://news.ycombinator.com/item?id=7508734

[paulcsmith]

Also see these reviews. May be good to evaluate a few of these https://danielsomerfield.github.io/turtles/review-blackbox/

[paulcsmith]

Transcrypt seems to be more actively maintained and works similarly to git-crypt https://github.com/elasticdog/transcrypt. There is also a nice Heroku build pack for it. I just tried it and it's really really easy to get started. I wonder how it would work with rebasing two branches that both have changes to the secrets...will have to try that out

[paulcsmith]

Closing in favor of #358