Send source command stdout to /dev/null to prevent leaking secrets

.gitea/workflows/deploy-to-wizard.yml

@@ -18,3 +18,11 @@ jobs:
           script: |
             cd ~/homelab
             git pull
+      - name: Fix script permissions
+        uses: appleboy/ssh-action@master
+        with:
+          host: ${{ vars.SSH_HOST_IP_WIZARD }} # this is a LAN IP
+          username: ${{ vars.SSH_USERNAME_WIZARD }}
+          key: ${{ secrets.SSH_KEY_DEPLOY_TO_WIZARD }}
+          script: |
+            chmod +x ~/homelab/wizard/config/*.sh

wizard/config/configure.sh

@@ -5,33 +5,34 @@ if [ "$(id -g -n)" != 'vyattacfg' ] ; then
 fi
 
 source /opt/vyatta/etc/functions/script-template
+source vyos_secrets.env
 
 configure
 
 echo "===== Configure firewall... ====="
 { 
-    source firewall.sh 
+    source firewall.sh > /dev/null
 } || { 
     echo "===== Failed to configure firewall =====" 
 }
 
 echo "===== Configure interfaces... ====="   
 { 
-    source interfaces.sh 
+    source interfaces.sh > /dev/null
 } || { 
     echo "===== Failed to configure interfaces =====" 
 }
 
 echo "===== Configure NAT... ====="
 { 
-    source nat.sh 
+    source nat.sh > /dev/null
 } || { 
     echo "===== Failed to configure NAT =====" 
 }
 
 echo "===== Configure QoS... ====="
 { 
-    source qos.sh 
+    source qos.sh > /dev/null
 } || { 
     echo "===== Failed to configure QoS =====" 
 }
@@ -39,7 +40,7 @@ echo "===== Configure QoS... ====="
 
 echo "===== Configure services... ====="
 { 
-    source service.sh 
+    source service.sh > /dev/null
 } || { 
     echo "===== Failed to configure services =====" 
 }
@@ -47,12 +48,11 @@ echo "===== Configure services... ====="
 
 echo "===== Configure system... ====="
 { 
-    source system.sh 
+    source system.sh > /dev/null
 } || { 
     echo "===== Failed to configure system =====" 
 }
 
-
 compare
 
 { # try commit, save