@naturalcycles/nodejs-lib/dist/bin/secrets-encrypt.js

Standard library for Node.js

#!/usr/bin/env node
import { dimGrey } from '../colors/colors.js';
import { runScript } from '../script/runScript.js';
import { secretsEncrypt } from '../secret/secrets-encrypt.util.js';
import { _yargs } from '../yargs/yargs.util.js';
runScript(() => {
    const { pattern, file, encKeyBuffer, del, jsonMode } = getEncryptCLIOptions();
    secretsEncrypt(pattern, file, encKeyBuffer, del, jsonMode);
});
function getEncryptCLIOptions() {
    let { pattern, file, encKey, encKeyVar, del, jsonMode } = _yargs().options({
        pattern: {
            type: 'string',
            array: true,
            desc: 'Glob pattern for secrets. Can be multiple.',
            // demandOption: true,
            default: './secret/**',
        },
        file: {
            type: 'string',
            desc: 'Single file to decrypt. Useful in jsonMode',
        },
        encKey: {
            type: 'string',
            desc: 'Encryption key as base64 encoded string',
            // demandOption: true,
            // default: process.env.SECRET_ENCRYPTION_KEY!,
        },
        encKeyVar: {
            type: 'string',
            desc: 'Env variable name to get `encKey` from.',
            default: 'SECRET_ENCRYPTION_KEY',
        },
        // algorithm: {
        //   type: 'string',
        //   default: 'aes-256-cbc',
        // },
        del: {
            type: 'boolean',
            desc: 'Delete source files after encryption/decryption. Be careful!',
            default: false,
        },
        jsonMode: {
            type: 'boolean',
            desc: 'JSON mode. Encrypts only json values, not the whole file',
            default: false,
        },
    }).argv;
    if (!encKey) {
        encKey = process.env[encKeyVar];
        if (encKey) {
            console.log(`using encKey from process.env.${dimGrey(encKeyVar)}`);
        }
        else {
            throw new Error(`encKey is required. Can be provided as --encKey or env.SECRET_ENCRYPTION_KEY (see readme.md)`);
        }
    }
    const encKeyBuffer = Buffer.from(encKey, 'base64');
    // `as any` because @types/yargs can't handle string[] type properly
    return { pattern: pattern, file, encKeyBuffer, del, jsonMode };
}