Infisical

You could use Infisical to inject the environment variable instead of keeping it on your system.

Requirements

• Access to an Infisical instance (self-hosted is fine)
• Install the Infisical CLI
• Login to your Infisical instance

Setup

1. Create a new folder. In our example, we use a UUID
2. Create a version folder in the folder you just created

infisical secrets folders create --projectId 0efc17fe-fb6b-4375-8d71-700f51ba2f65 -n 592388ea-d357-4f2e-9413-3b8169fcc085
infisical secrets folders create --projectId 0efc17fe-fb6b-4375-8d71-700f51ba2f65 -p 592388ea-d357-4f2e-9413-3b8169fcc085 -n v1

3. Run goaes g
4. Set the secret in that path to the value from step 3

infisical secrets set --projectId 0efc17fe-fb6b-4375-8d71-700f51ba2f65 --path "/592388ea-d357-4f2e-9413-3b8169fcc085/v1" GOAES_PASSPHRASE=Ipa0qWUJAVPR3qBmLLzluOly4LHPdPF2YBSH2vXURTo=

Usage

After you've setup and added your secret, you can run goaes like in the example below.

infisical run --env=dev --path "/592388ea-d357-4f2e-9413-3b8169fcc085/v1" --projectId 0efc17fe-fb6b-4375-8d71-700f51ba2f65 -- goaes e ./input.txt