Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/jalpp/passdiy
A TUI for password management on HashiCorp Vault.
https://github.com/jalpp/passdiy
argon2id bubbletea cli golang hashicorp-vault password-generator password-hash password-manager password-salting password-store tui
Last synced: 2 months ago
JSON representation
A TUI for password management on HashiCorp Vault.
- Host: GitHub
- URL: https://github.com/jalpp/passdiy
- Owner: jalpp
- License: mit
- Created: 2024-10-13T01:58:06.000Z (3 months ago)
- Default Branch: main
- Last Pushed: 2024-10-16T03:44:00.000Z (3 months ago)
- Last Synced: 2024-10-17T17:57:16.373Z (3 months ago)
- Topics: argon2id, bubbletea, cli, golang, hashicorp-vault, password-generator, password-hash, password-manager, password-salting, password-store, tui
- Language: Go
- Homepage: https://github.com/jalpp/PassDIY
- Size: 48.8 KB
- Stars: 3
- Watchers: 1
- Forks: 1
- Open Issues: 7
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# PassDIY
A personal password/token manager TUI for developers to generate various types of hash/salted secrets and store them in different cloud based vaults
## Why PassDIY?
Because managing tokens, pins used in various dummy/dev apps require them to be generated first, and store them somewhere, I personally used 3 sites to generate random API dummy tokens, store them in other site. It become a big mess, and I thought there has to be a simple way where I can generate **pass**words and **D**o **I**t m**Y**self hence PassDIY.
## Features
- Generation of strong secrets like pins, passwords, API tokens, passphrases
- Generate X multiple secrets at once and pick X and X password generation algorithms
- Hash tokens/passwords with Argon2Id and Bcrypt
- Salt tokens/passwords
- Copy passwords to clipboard
- Automatically config password/token lengths and other settings
- Hashicorp Vault integration to connect to secure vault and store generated secrets on cloud
- 1Password integration to connect to secure vault and store generated secrets on cloud
- Custom vaults support via extend package in passdiy to allow you to connect to your own cloud vaults via passDiy UI
## Hashicorp Vault Commands
- hcpvaultconnect automatically connect to hcp vault via service principle
- hcpvaultstore store secrets into the vault via name=value format
- hcpvaultlist list log details about token created at, created by details
## 1Password Commands
- 1passstore store secrets into the vault via name|password|url format
- 1passwordlist list secret names for connected vault
## Demo
## Hashicorp Setup
To allow PassDIY to store and connect to your Hashicorp vault you must create a [service principle](https://developer.hashicorp.com/hcp/docs/hcp/iam/service-principal) with ```Vault Secrets App Manager``` permission. Also would need set below envs
`export HCP_CLIENT_ID=`
`export HCP_CLIENT_SECRET=`
more detailed in `./Setup.md`
## 1Password Setup
To allow PassDIY to connect to your 1Password Vault you would need to set [service principle](https://developer.1password.com/docs/sdks) anf the service account token
`export OP_SERVICE_ACCOUNT_TOKEN=`
## Config custom vault to use PassDIY TUI
to config custom vaults that are not currently supported by Passdiy all you have to do is edit the interface.go file and define your custom implementation of the functions, then you set `export USE_PASDIY_CUSTOM_VAULT=true` and PassDIY will automatically interface the custom vault
```go
package extend
var (
VAULT_PREFIX = "pref"
VAULT_MAIN_DESC = "Manage token/password on " + VAULT_PREFIX
VAULT_SUBCOMMAND_NAMES = []string{VAULT_PREFIX + "store", VAULT_PREFIX + "list"}
VAULT_SUBCOMMAND_DESC = []string{"store", "lists"}
VAULT_DISPLAY_COLOR = "#E2EAF4"
)
func ConnectUI() string {
return Connect()
}
func StoreUI(userInput string) string {
var parser string
return Create(userInput, parser)
}
func ListUI() string {
return List()
}
```
## Installation
If you have `make` installed, follow these steps to build, run, and install **passdiy**:
1. **Build the project**:
```
make build
```
2. **Run the application**:
```
make run
```
3. **Install globally** (optional):
```
sudo make install
```
You can then run it from anywhere with: `passdiy`
If you do not have `make` you can build and run it traditionally with:
```
go run .
```
## Uninstall
You can uninstall passdiy with:
```
sudo make uninstall
```
## Roadmap
- dynamically change config
- add more vaults possibly vercel/Azure key vault
- add more hashing algos
## Acknowledgements
- [BubbleTea](https://github.com/charmbracelet/bubbletea)
- [Lipgloss](github.com/charmbracelet/lipgloss)
- [Argon2id](https://github.com/alexedwards/argon2id)
- [Bcrypt](https://golang.org/x/crypto/bcrypt)
- [Hashicorp Vault](https://developer.hashicorp.com/hcp/api-docs/vault-secrets#overview)
- [English](github.com/gregoryv/english)
- [Clipboard](https://github.com/atotto/clipboard)
- [1Password SDK](https://github.com/1Password/onepassword-sdk-go)
## License
[MIT](https://choosealicense.com/licenses/mit/)
## Discord
[Invite](https://discord.gg/FU6DMKZuZY)
## Authors
- [@jalpp](https://www.github.com/jalpp)
## Contributor
- [@cursedcadaver](https://github.com/cursedcadaver)