Seeqret

https://thebjorn.github.io/seeqret/
Admin
Seeqret is a tool designed to safely store, manage, and transfer code secrets and credentials...
Tokens:4,118
Snippets:43
Trust Score:9.7
Update:6 days ago
Show doc for...
Tokens:
Raw
### seeqret load command examples

Source: https://thebjorn.github.io/seeqret/commands

Shows two ways to load exported secrets: from a file using -f and from a command-provided value using -v. The sender (-u) can be a bare or qualified username. Existing secrets with the same app:env:key are overwritten, making re-runs safe.

```bash
$❱ seeqret load -u alice -f export.json
```

```bash
$❱ seeqret load -u alice -v '<exported-value>' -s command
```

--------------------------------

### All names starting with PG

Source: https://thebjorn.github.io/seeqret/filter-strings

Filter spec that matches all names starting with 'PG'. The app and env wildcards can be omitted.

```text
*:*:PG*

```

```text
::PG*

```

```text
PG*

```

--------------------------------

### seeqret add --help output

Source: https://thebjorn.github.io/seeqret/commands

Shows the help output for the seeqret add command, listing its sub-commands: key, text, and user. The output includes the usage line, options (only -h/--help), and a brief description of each sub-command.

```text
seeqret❱ seeqret add --help
Usage: seeqret add [OPTIONS] COMMAND [ARGS]...

  Add a new secret.

Options:
  -h, --help  Show this message and exit.

Commands:
  key   Add a new NAME -> VALUE mapping.
  text  Add a new multi-line secret with key NAME, eg recovery codes.
  user  Add a new user to the vault from a public key.

```

--------------------------------

### seeqret add key with default app and env

Source: https://thebjorn.github.io/seeqret/commands

Adds a key with the given name and value, defaulting --app and --env to "*". Fails if the key already exists in the given app:env.

```bash
$❱ seeqret add key NAME "VALUE" --app "*" --env "*"

```

--------------------------------

### seeqret --help output

Source: https://thebjorn.github.io/seeqret/commands

Top-level help output for the seeqret CLI, listing all available commands and options.

```text
seeqret❱ seeqret --help
Usage: seeqret [OPTIONS] COMMAND [ARGS]...

Options:
  --version       Show the version and exit.
  -L, --log TEXT
  -h, --help      Show this message and exit.

Commands:
  add           Add a new secret.
  backup        Backup the vault to an encrypted HTML file.
  edit          Edit a secret or user in the vault.
  env           Read filters from env.template and export values from the...
  export        Export the vault TO a user (use `seeqret load` to import)
  get           Get the value of a secret (specified by FILTER).
  importenv     Import secrets from a .env file.
  info          List hierarchical command structure.
  init          Initialize a new vault in DIR
  introduction  Print an introduction to the vault.
  list          List the contents of the vault
  load          Save exported secrets to local vault.
  owner         List the owner of the vault
  public-key    Show the admin's public key.
  push          Push secrets from the vault to external systems.
  receive       Receive and import encrypted secrets from a transport.
  rm            Remove a secret or user from the vault.
  send          Send encrypted secrets to a user via file or Slack.
  serializers   List available serializers.
  server        Server commands.
  setenv        Set global environment variables from secrets matching...
  slack         Slack-based secret exchange transport.
  upgrade       Upgrade the database to the latest version
  users         List the users in the vault
  whoami        Display the current user and their role in the vault.
```

--------------------------------

### seeqret add user command

Source: https://thebjorn.github.io/seeqret/commands

Adds a user to the database. Prompts for username, email, and public key. Only known users can receive exports.

```bash
$❱ seeqret add user

```

--------------------------------

### seeqret export --to bob command

Source: https://thebjorn.github.io/seeqret/commands

Creates an export file for a specific user. Accepts a bare or qualified username.

```bash
$❱ seeqret export --to bob

```

--------------------------------

### seeqret add key with --force to overwrite

Source: https://thebjorn.github.io/seeqret/commands

Overwrites an existing key in place by passing --force. Use when the key already exists in the given app:env.

```bash
$❱ seeqret add key NAME "NEW_VALUE" --app myapp --env dev --force

```

--------------------------------

### seeqret export --to self command

Source: https://thebjorn.github.io/seeqret/commands

Creates an export file for yourself, useful for moving the vault to a new computer or server.

```bash
$❱ seeqret export --to self

```

--------------------------------

### seeqret export --to all command

Source: https://thebjorn.github.io/seeqret/commands

Exports to every other known user except the vault owner. Can be combined with other --to values; duplicate recipients are removed.

```bash
$❱ seeqret export --to all -f myapp:prod:

```

--------------------------------

### All development values for a specific app

Source: https://thebjorn.github.io/seeqret/filter-strings

Filter spec that matches all development values for a specific app. The name-spec wildcard can be omitted.

```text
my-app:dev:*

```

```text
my-app:dev:

```

--------------------------------

### seeqret rm user command

Source: https://thebjorn.github.io/seeqret/commands

Removes a user from the vault. Accepts a bare or qualified username; prompts for confirmation unless --yes is passed. The vault owner cannot be removed.

```bash
$❱ seeqret rm user bob@hispc

```

--------------------------------

### Windows Directory Encryption Script (attrib, icacls, cipher)

Source: https://thebjorn.github.io/seeqret/background

Batch script to encrypt a directory on Windows. It sets the directory as encrypted, grants full control to the current user, removes inheritance, and encrypts the directory. This is used under the assumption that encrypted directories on Windows are secure.

```batch
attrib +I %1
icacls %1 /grant %USERDOMAIN%\%USERNAME%:(F) /T
icacls %1 /inheritance:r
cipher /e %1

```

--------------------------------

### All values for a specific app

Source: https://thebjorn.github.io/seeqret/filter-strings

Filter spec that matches all values for a specific app. The wildcard parts can be omitted.

```text
my-app:*:*

```

```text
my-app:*

```

```text
my-app:

```

--------------------------------

### Filter spec format

Source: https://thebjorn.github.io/seeqret/filter-strings

The general format for a filter-spec string. Each part between colons is required and uses glob syntax. Colon is not allowed in app/env/name values.

```text
<app-spec>:<env-spec>:<name-spec>

```

--------------------------------

### All values filter spec

Source: https://thebjorn.github.io/seeqret/filter-strings

Filter spec that matches all values. The wildcard form can be abbreviated, but on Windows solitary stars may be expanded, so using colons is safer.

```text
*:*:*

```

```text
*

```

```text
::

```

```text
:

```

--------------------------------

### All names ending with _ID

Source: https://thebjorn.github.io/seeqret/filter-strings

Filter spec that matches all names ending with '_ID'. This uses a glob pattern with a trailing wildcard.

```text
*_ID

```
Tokens:
Raw