Contents

require 'openssl'
require 'base64'

class Handsomefencer::Environment::Crypto

  def initialize
    @cipher = OpenSSL::Cipher.new 'AES-128-CBC'
    @salt = '8 octets'
    @pass_phrase = Base64.decode64(get_deploy_key)
  end

  def get_deploy_key
    ENV['DEPLOY_KEY'].nil? ? read_deploy_key : ENV['DEPLOY_KEY']
  end

  def read_deploy_key
    File.exist?(dkfile) ? File.read(dkfile) : save_deploy_key
  end

  def save_deploy_key
    @new_key = @cipher.random_key
    write_to_file Base64.encode64(@new_key), dkfile
    ignore_sensitive_files
    read_deploy_key
  end

  def ignore_sensitive_files
    if File.exist? '.gitignore'
      ["/#{dkfile}", "/.env/*"].each do |pattern|
        unless File.read('.gitignore').match pattern
          open('.gitignore', 'a') { |f| f << pattern }
        end
      end
    end
  end

  def encrypt(file)
    @cipher.encrypt.pkcs5_keyivgen @pass_phrase, @salt
    encrypted = @cipher.update(File.read file) + @cipher.final
    write_to_file(Base64.encode64(encrypted), file + '.enc')
  end

  def decrypt(file)
    encrypted = Base64.decode64 File.read(file)
    @cipher.decrypt.pkcs5_keyivgen @pass_phrase, @salt
    decrypted = @cipher.update(encrypted) + @cipher.final
    decrypted_file = file.split('.enc').first
    write_to_file decrypted, decrypted_file
  end

  def source_files(directory=nil, extension=nil)
    default = Dir.glob(".env/**/*#{extension}")
    directory.nil? ? default : Dir.glob(directory + "/**/*#{extension}")
  end

  def obfuscate(directory=nil, extension=nil)
    extension = extension || '.env'
    directory = directory || '.env'
    source_files(directory, extension).each { |file| encrypt file }
  end

  def expose(directory=nil, extension=nil)
    extension = extension || '.env.enc'
    directory = directory || '.env'
    source_files(directory, extension).each { |file| decrypt(file) }
  end

  private

    def dkfile
      "config/deploy.key"
    end

    def write_to_file(data, filename)
      open(filename, "w") { |io| io.write data }
    end

end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
handsomefencer-environment-0.2.10	lib/handsomefencer/environment/crypto.rb