docker_env.sh

gistfile1.txt

#!/bin/bash
# ------------------------------------------------------------------------------
# docker_env.sh
#
# This script securely loads environment variables from Google Secret Manager,
# exports them to the local shell, and generates a .env file from a .env.dist
# template using envsubst.
#
# - Secrets are never printed to the console.
# - .env is created safely with only non-empty, non-commented variables.
# - File permissions on .env are restricted (chmod 600).
#
# Usage:
#   ./docker_env.sh
#
# Requirements:
#   - gcloud CLI authenticated with access to the secret
#   - .env.dist file present in the current directory
# ------------------------------------------------------------------------------

set -e
export $(gcloud secrets versions access latest --secret=service-production |grep -v "^#\|^$" | xargs)
cat .env.dist | envsubst > .env