Use untrusted data stores with a dead simple secret manager CLI. Do not trust GDrive, S3 and really any non self-hosted service. Encrypt your files during writes
- Encrypt secrets with a friendly CLI
- Mount JSON secret database as a filesystem
- Share your secrets in a P2P, Zero Trust manner
go install github.com/RogueTeam/guardian/cmd/guardian@latest
- CLI tool
guardian secrets help
Example:
guardian secrets [init get set list del]
- Mount (Linux only)
guardian mount help
Example:
guardian mount ./mountpoint
Then you could handle secret management as they where files in your system.