I have a system (actually it is a set of shell scripts) which has a lot of instances on different servers in different test stages (dev, uat, prd). Scripts need use some passwords for authorization in for example database (btw each environment has its own passwords).
I have a deployment system, therefore I’m able to hold passwords in repository to not to update them each time manually.
But it’s completely unacceptable from security point of view to store them as plain text.
I could develop a solution myself using gpg (to hold each password in gpg encrypted file with pub certificate of target environment), but I’m not sure it’s the best way.
Is there any existing opensource solutions for password storage which are better than own solution with gpg?
It seems you are looking for
Password store. You can have a look into vault 0.2