You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Andrei Jiroh Halili 231c195098
Move from vault/personal/ to vault/personal/2fa-google-andreijiroheugeniohalili24680
2 months ago
.github/workflows Add GHA workflow to block PRs 2 months ago
.public-keys Updated exported Public Keys 2 months ago
2fa Move from 2fa/google.ajhalili2006-main/code to vault/personal/ 2 months ago
keys Save secret to keys/age/personal: 2 months ago
recovery-phases Move from recovery-phases/valora-wallet to recovery-phrases/personal/crypto-valora 2 months ago
recovery-phrases/personal Updated exported Public Keys 2 months ago
stellapent Updated exported Public Keys 2 months ago
vault/personal Move from vault/personal/ to vault/personal/2fa-google-andreijiroheugeniohalili24680 2 months ago
.gitattributes Configure git repository for gpg file diff. 1 year ago
.gitignore Add gitignore file to ignore swap files and stuff 1 year ago
.gpg-id fsck 2 months ago
README.adoc Update README to include install docs for gopass + Doppler in FAQs 2 months ago


:source-highlighter: pygments // technically needed for Asciidoc parsers for some code
:gitlab-personal-namespace: // DO NOT UPDATE, dotfiles-secrets only exist in SaaS
= Andrei Jiroh's Passowrd Store

This is where I store some of my TOTP secrets and other cursed secrets I need to store in Git and in encrypted manner.
While I can safely store my encrypted secrets here in GPG, some cannot be here such as my SSH and GPG private keys, as they're
stored in {gitlab-personal-namespace}/dotfiles-secrets[an private repository only Andrei Jiroh can access].

== Usage docs

=== Setup

# option 1: with passwordstore
doas apk add pass git gpg
pass git clone

# option 2: with gopass
# Debian and dervivative users should check
# first. See also TBD
doas apk add gopass git gpg
gopass clone ssh://
# recommended: symlink ~/.password-store to our root gopass store
ln -s ~/.local/share/gopass/stores/root ~/.password-store

=== Adding new entry


== Note on whoever manage this repo as noted on my will

You must keep all of my GPG private keys private and hidden from the public eye and its key passwords well-guarded against
hackers and other people trying to get as much as senstive information hidden under encryption.


== FAQs

=== Do this replace your usage of your current password manager (Bitwarden)

Technically no. While I can still access them through the official CLI (himt: `npm i -g @bitwarden/cli`), I do not want
to lose access to the TOTP codes, especially it's always a painful process to do the recovery processes through identity
verification and sometimes, the brute-force hell.

=== What's about Doppler?

`pass`/`gopass` are being in use in combination with Doppler, an SecretOps cloud service, to store secrets. The
biggest difference here is the earlier uses GPG for encryption and Git for version control while the latter is
more complex and even store the keys to encrypt/decrypt stuff in a HSM.

== License

This documentation is licensed under CC BY-SA 4.0 Unported, while the rest are either under the default copyright
rules or the MIT license. Check the headers of each file to avoid possible copyright issues. Stuff that are encrypted
through GPG are not covered by MIT license.