Initial monorepo — everything BlackRoad in one place
bin/ 230 CLI tools (ask-*, br-*, agent-*, roadid, carpool) scripts/ 99 automation scripts fleet/ Node configs and deployment workers/ Cloudflare Worker sources (roadpay, road-search, squad webhooks) roadc/ RoadC programming language roadnet/ Mesh network (5 APs, WireGuard) operator/ Memory system scripts config/ System configs dotfiles/ Shell configs docs/ Documentation BlackRoad OS — Pave Tomorrow. RoadChain-SHA2048: d1a24f55318d338b RoadChain-Identity: alexa@sovereign RoadChain-Full: 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
This commit is contained in:
66
bin/blackroad-vault
Executable file
66
bin/blackroad-vault
Executable file
@@ -0,0 +1,66 @@
|
||||
#!/usr/bin/env bash
|
||||
# br-vault - Fleet-wide secrets management
|
||||
PINK='\033[38;5;205m'
|
||||
AMBER='\033[38;5;214m'
|
||||
GREEN='\033[38;5;82m'
|
||||
NC='\033[0m'
|
||||
|
||||
cmd="${1:-help}"
|
||||
shift 2>/dev/null
|
||||
|
||||
case "$cmd" in
|
||||
init)
|
||||
echo -e "${PINK}Initializing vault across fleet...${NC}"
|
||||
for host in cecilia lucidia octavia aria; do
|
||||
echo -n " $host: "
|
||||
ssh "$host" '~/br-vault init 2>/dev/null && echo "OK"' 2>/dev/null || echo "SKIP"
|
||||
done
|
||||
;;
|
||||
set)
|
||||
key="$1"; value="$2"
|
||||
if [ -z "$key" ] || [ -z "$value" ]; then
|
||||
echo "Usage: br-vault set <key> <value>"
|
||||
exit 1
|
||||
fi
|
||||
echo -e "${AMBER}Setting secret '$key' across fleet...${NC}"
|
||||
for host in cecilia lucidia octavia aria; do
|
||||
echo -n " $host: "
|
||||
ssh "$host" "~/br-vault set '$key' '$value'" 2>/dev/null && echo -e "${GREEN}OK${NC}" || echo "FAIL"
|
||||
done
|
||||
;;
|
||||
get)
|
||||
key="$1"
|
||||
if [ -z "$key" ]; then
|
||||
echo "Usage: br-vault get <key>"
|
||||
exit 1
|
||||
fi
|
||||
echo -e "${AMBER}Getting secret '$key' from primary...${NC}"
|
||||
ssh cecilia "~/br-vault get '$key'" 2>/dev/null
|
||||
;;
|
||||
list)
|
||||
echo -e "${PINK}Secrets across fleet:${NC}"
|
||||
for host in cecilia lucidia octavia aria; do
|
||||
echo -e "\n${AMBER}=== $host ===${NC}"
|
||||
ssh "$host" '~/br-vault list' 2>/dev/null
|
||||
done
|
||||
;;
|
||||
sync)
|
||||
echo -e "${PINK}Syncing vault from cecilia to all nodes...${NC}"
|
||||
ssh cecilia 'cat ~/.blackroad/vault/secrets.enc' > /tmp/vault-sync.enc 2>/dev/null
|
||||
for host in lucidia octavia aria; do
|
||||
echo -n " $host: "
|
||||
scp -q /tmp/vault-sync.enc "$host":~/.blackroad/vault/secrets.enc 2>/dev/null && echo -e "${GREEN}OK${NC}" || echo "FAIL"
|
||||
done
|
||||
rm -f /tmp/vault-sync.enc
|
||||
;;
|
||||
help|*)
|
||||
echo -e "${PINK}br-vault - Fleet Secrets Manager${NC}"
|
||||
echo ""
|
||||
echo "Commands:"
|
||||
echo " init Initialize vault on all nodes"
|
||||
echo " set <key> <val> Set secret across fleet"
|
||||
echo " get <key> Get secret from primary"
|
||||
echo " list List all secrets"
|
||||
echo " sync Sync vault from cecilia to all"
|
||||
;;
|
||||
esac
|
||||
Reference in New Issue
Block a user