git-ark 0.6.0

A write-only backup vault that fronts your own git host
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

# git-ark secrets — copy to secrets.toml and `chmod 600`.
# NEVER commit this file. It is gitignored; keep it that way.

[aws]
# The WRITE-ONLY IAM user (e.g. git-ark-nas). Its policy should allow ONLY
# s3:PutObject on the backup bucket/prefix — no read, list, or delete.
access_key_id     = "AKIAEXAMPLE"
secret_access_key = "example-secret-key"

[github]
# GitHub mirror credentials — only needed if a repo opts into mirroring via its
# .git-ark.yml. A fine-grained PAT is scoped to ONE owner (org or user), so use
# one token per owner you mirror to (keyed by the `github.owner` in a repo's
# .git-ark.yml). Scope each PAT to repository administration (create) + contents
# (push) on that owner, nothing else.
#
# Optional default token, used when no per-owner token below matches:
# token = ""

# Per-owner tokens: owner-name = "token".
[github.tokens]
# your-org = "github_pat_..."
# youruser = "github_pat_..."