Extracting Rails credentials as ENV vars for accessories?

[northeastprince]

I'm running Litestream as an accessory and would like to be able to use the existing S3 credentials encrypted with RAILS_MASTER_KEY and set them as environment variables - any idea how I could go about this?

[tuladhar]

You can set the secrets environment variable for accessory, like this:

# Use accessory services (secrets come from .kamal/secrets)
accessories:
  litestream:
    env:
      secret:
        - S3_CREDENTIAL_A
        - S3_CREDENTIAL_B

[northeastprince]

I'm aware, but I'm trying to see if I can get it straight from Rails credentials instead of redundantly copying the secrets

[JensRavens]

One way could be to parse the credential file in your .kamal/secrets file:

SMTP_PASSWORD=${rails credentials:show | grep smtp_password | cut -f2 -d" "}

(this is using a very simple way of extracting yml values from the config that I threw together in a few minutes, it's probably better to use a custom ruby script that's more readable and uses a proper yml parser)

[northeastprince]

I realized I can do this in deploy.yml - thanks for the suggestions everyone!