Pass

Simple password manager using gpg

Links

• Homepage
• Read passwords from the 'pass' passwordstore into ansible

Setting up a shared pass git repository

On server pass.example.com create user passuser Then as this user:

mkdir pass.git
git init --bare pass.git

On your workstation:

If you don't already have gpg key:

gpg --gen-key

and import pubkey of other user:

gpg --import hisid

To make gpg use group, add to .gnupg/gpg.conf:

group ourgroup yourid hisid
default-key <your key id>

Then init pass:

pass init ourgroup
pass git init
pass git add remote origin passuser@pass.example.com
pass git push

Now all it takes to add keys is:

pass add someserver/someaccount
pass git push

On system of hisid you run the same pass init/git instructions, and then

pass git pull

ACHTUNG any user who edits or adds keys needs the public keys of all group members!