Secrets Management
Use the secrets CLI to access credentials securely.
Commands
| Command | Description |
|---|---|
secrets get <name> | Retrieve secret (copies to clipboard) |
secrets get <name> --print | Print to stdout (for scripts) |
secrets get <name> --network | Force fetch from GCP Secret Manager |
secrets get <name> --read-through | Check local first, fall back to network |
secrets store <name> <value> | Store a secret locally |
secrets store <name> --network | Store in GCP Secret Manager |
secrets list | List local secrets |
secrets list --all | List from both local and network |
Common Secrets
- •
hestia-hass-api-access- Home Assistant API token - •
ntfy-basic-auth-password- ntfy.sh authentication - •
EXA_API_KEY- Exa search API
Usage with HTTPie
bash
http -A bearer -a "$(secrets get hestia-hass-api-access --print)" \ GET http://hestia.local/hass/api/states
Important
- •Use
--printfor scripts (default copies to clipboard) - •Use
--ignore-stdinwith HTTPie to avoid hangs - •Never log or print secret values directly
- •Handle missing secrets gracefully
Task
$ARGUMENTS