lockbox-env

---

Yandex Cloud Lockbox service one line config library

With this library you can load all Lockbox secrets directly to environment variables in runtime

$3

You need invoke config function from main project endpoint

``javascript
require('lockbox-env').config({
secrets: '', // string or array of string secret id for load, also can be specify by env variable (see below)
saKeyFile: 'sa.json', // optional, service account json key file path, also can be specify by env variable (see below)
iamToken: 'f1-T2dl94mf8sy5j...', // optional, iam auth token, also can be specify by env variable (see below)
envPrefix: 'LOCKBOX', // optional, prefix for environment variables that loaded from secrets
oneTimeRead: true, // optional, enable getter that clean variable from process.env after first read
logger: pino(), // optional, override default library logger
iamEndpoint, // optional, override Yandex Cloud IAM api endpoint
lockboxEndpoint, // optional, override Yandex Cloud Lockbox api endpoint
folderId: '', // optional, Yandex Cloud project folder-id for auto load secrets by main project name, also can be specify by env variable (see below)
}) // return promise

// also you can use sync version
require('lockbox-env').configSync(...)
`

$3

| variable | description |
| ---------------------------------------------- | ------------------------------------------------------------------- |
| LOCKBOX_SERVICE_ACCOUNT_KEY_FILE_CREDENTIALS | specify .json service account key file for auth |
| LOCKBOX_ACCESS_TOKEN_CREDENTIALS | specify iam-token directly (ex: from cloud function) for auth |
| LOCKBOX_SECRET_ID | lockbox cloud secret-id for auto load secrets directly by secret-id |
| LOCKBOX_FOLDER_ID` | lockbox cloud folder-id for auto load secrets by main package name |

---
\#lockbox \#env \#secret \#security \#credential