don't expose b2 credentials in command line

reef-technologies · Nov 24, 2023 · 64b2222 · 64b2222
1 parent 644cf34
commit 64b2222
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 3 deletions.
diff --git a/{{cookiecutter.repostory_name}}/bin/backup-file-to-b2.sh b/{{cookiecutter.repostory_name}}/bin/backup-file-to-b2.sh
@@ -15,5 +15,7 @@ else
   BACKUP_B2_FILENAME"$(basename "$1")"
 fi
 
-docker run --rm -iq -e B2_APPLICATION_KEY="$BACKUP_B2_KEY_SECRET" -e B2_APPLICATION_KEY_ID="$BACKUP_B2_KEY_ID" \
+export B2_APPLICATION_KEY_ID="$BACKUP_B2_KEY_ID"
+export B2_APPLICATION_KEY="$BACKUP_B2_KEY_SECRET"
+docker run --rm -iq -e B2_APPLICATION_KEY -e B2_APPLICATION_KEY_ID \
   backblazeit/b2:3.13.1 upload-file "$BACKUP_B2_BUCKET" "$1" "$BACKUP_B2_FILENAME"
diff --git a/{{cookiecutter.repostory_name}}/bin/list-b2-backups.sh b/{{cookiecutter.repostory_name}}/bin/list-b2-backups.sh
@@ -7,5 +7,7 @@ BACKUP_B2_KEY_ID="${1-$BACKUP_B2_KEY_ID}"
 BACKUP_B2_KEY_SECRET="${2-$BACKUP_B2_KEY_SECRET}"
 BACKUP_B2_BUCKET="${3-$BACKUP_B2_BUCKET}"
 
-docker run --rm -iq -e B2_APPLICATION_KEY="$BACKUP_B2_KEY_SECRET" -e B2_APPLICATION_KEY_ID="$BACKUP_B2_KEY_ID" \
+export B2_APPLICATION_KEY_ID="$BACKUP_B2_KEY_ID"
+export B2_APPLICATION_KEY="$BACKUP_B2_KEY_SECRET"
+docker run --rm -iq -e B2_APPLICATION_KEY -e B2_APPLICATION_KEY_ID \
   backblazeit/b2:3.13.1 ls --long "$BACKUP_B2_BUCKET"
diff --git a/{{cookiecutter.repostory_name}}/bin/restore-db-from-b2.sh b/{{cookiecutter.repostory_name}}/bin/restore-db-from-b2.sh
@@ -11,5 +11,7 @@ fi
 
 B2_FILE_ID="$1"
 
-docker run --rm -iq -e B2_APPLICATION_KEY="$BACKUP_B2_KEY_SECRET" -e B2_APPLICATION_KEY_ID="$BACKUP_B2_KEY_ID" \
+export B2_APPLICATION_KEY_ID="$BACKUP_B2_KEY_ID"
+export B2_APPLICATION_KEY="$BACKUP_B2_KEY_SECRET"
+docker run --rm -iq -e B2_APPLICATION_KEY -e B2_APPLICATION_KEY_ID \
   backblazeit/b2:3.13.1 cat "b2id://$B2_FILE_ID" | "${SCRIPT_DIR}"/restore-db.sh -