Passwords are stored in clear text

[jkittner]

I was just wondering if there is another way of providing the password to the process that is not saving it a dozen times as clear text in a file. The file does have 600-permissions, but still.

ansible_role_restic/templates/restic_access_Linux.j2

Line 7 in 3540bee

export RESTIC_PASSWORD='{{ restic_repos[item.repo].password | regex_replace('\'', '\'\\\'\'') }}'

Could one read it from the keyring as discussed here? https://forum.restic.net/t/read-password-from-gnome-keyring/1094/6

Happy to hear your thoughts on this