Load secrets automatically with 1password and direnv

[Sascha]

Problem


Load automatically secrets stored in 1password as environment variables.

Solution

Global config


## File: ~/.config/direnv/direnv.toml

[global]
load_dotenv = true

[whitelist]
prefix = [ "~/workspace" ]



Root working directory


## File: ~/workspace/.envrc

# Inject 1password secrets into environment
use_sourceop() {
if printenv | grep -q "op://"; then
source <(printenv | grep "op://" | op inject)
fi
}



Project directory


## File: ~/workspace/python/project/.envrc

dotenv_if_exists
source_up_if_exists
use sourceop




## File: ~/workspace/python/project/.env

PROJECT_VAR=<EXAMPLE>
PROJECT_SECRET="op://Private/Python Project Secret/password"



Explanation


In the global configuration file, we enable loading environment variables from .env files by default.
In the root working directory, we create a script for loading secrets from 1password.
In the project directory, we load .env files, add config from the root working directory and finally run the script for loading secrets.

References

Источник:

Пожалуйста Авторизируйтесь или Зарегистрируйтесь для просмотра скрытого текста.