bounca/example/prep.d/10-rand-pwd.sh

18 lines
405 B
Bash
Executable File

#!/bin/sh
set -euo pipefail
# Initialize random passwords if needed
if ! vault kv list kv/service 2>/dev/null | grep -q -E '^bounca$'; then
vault kv put kv/service/bounca \
django_secret=$(pwgen -s -n 50 1)
fi
for PWD in django_secret; do
if ! vault kv get -field ${PWD} kv/service/bounca >/dev/null 2>&1; then
vault kv patch kv/service/bounca \
${PWD}=$(pwgen -s -n 50 1)
fi
done