Module: Ironclad::Capistrano

Defined in:
lib/ironclad/capistrano.rb

Overview

Capistrano DSL helpers. Require this from your Capfile:

require "ironclad/capistrano"

so deploys source RAILS_MASTER_KEY from the configured secrets manager and can read credentials without a key file on disk.

Instance Method Summary collapse

Instance Method Details

#credential(*keys) ⇒ Object

Read a value from the stage’s encrypted credentials during a deploy.



21
22
23
24
25
26
27
28
29
30
31
32
 
# File 'lib/ironclad/capistrano.rb', line 21

def credential(*keys)
  rails_master_key
  env = fetch(:rails_env, fetch(:stage)).to_s
  @ironclad_credentials ||= ActiveSupport::EncryptedConfiguration.new(
    config_path: "config/credentials/#{env}.yml.enc",
    key_path: "config/credentials/#{env}.key",
    env_key: 'RAILS_MASTER_KEY',
    raise_if_missing_key: true
  )
  @ironclad_credentials.dig(*keys) ||
    raise("Rails credential `#{keys.join('.')}` is missing")
end

#rails_master_key ⇒ Object

Set RAILS_MASTER_KEY for the current stage (respecting one already set).



15
16
17
18
 
# File 'lib/ironclad/capistrano.rb', line 15

def rails_master_key
  env = fetch(:rails_env, fetch(:stage)).to_s
  ENV['RAILS_MASTER_KEY'] = Ironclad.key(env)
end