Add bash scripts for encrypting and decrypting secrets

Introduces bash scripts to encrypt and decrypt environment and key files for CI/CD workflows. Includes shared config and functions, main scripts for encryption/decryption, and a test script for decryption. Scripts use OpenSSL and generate a report for encrypted files.

Author: YoungMayor

bash-sample/decrypt_secrets.sh

@@ -0,0 +1,35 @@
+#!/bin/bash
+
+# decrypt_secrets.sh
+# Decrypts encrypted environment and key files for CI/CD
+# Usage: ./decrypt_secrets.sh <ENCRYPTION_PASSWORD>
+
+set -e  # Exit on error
+
+# Load shared config
+source "./encrypt_config.sh"
+source "./encrypt_functions.sh"
+
+# Check if encryption password is provided
+if [ -z "$1" ]; then
+  echo -e "${RED}❌ Error: Encryption password not provided${NC}"
+  echo "Usage: $0 <ENCRYPTION_PASSWORD>"
+  exit 1
+fi
+
+ENCRYPTION_PASSWORD="$1"
+
+echo -e "${YELLOW}🔐 Starting decryption process...${NC}"
+echo ""
+
+decrypt_file "$OUT_DIR/$ENV_OUT" "$ENV_IN"
+decrypt_file "$OUT_DIR/$KEYSTORE_OUT" "$KEYSTORE_IN"
+decrypt_file "$OUT_DIR/$KEYPROPERTIES_OUT" "$KEYPROPERTIES_IN"
+decrypt_file "$OUT_DIR/$SERVICE_KEY_OUT" "$SERVICE_KEY_IN"
+
+cp "$ENV_IN" ".env"
+
+echo ""
+echo ""
+
+echo -e "${GREEN}🎉 All secrets decrypted successfully!${NC}"

bash-sample/encrypt_config.sh

@@ -0,0 +1,24 @@
+# Colors for output
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+RED='\033[0;31m'
+BLUE='\033[0;34m'
+NC='\033[0m' # No Color
+
+# Files and DIRs
+OUT_DIR="enc_keys"
+TEST_OUT_DIR="test_dec_keys"
+
+ENV_IN=".env.prod"
+ENV_OUT=".env.prod.encrypted"
+
+KEYSTORE_IN="android/app/keystore.jks"
+KEYSTORE_OUT="keystore.jks.encrypted"
+
+KEYPROPERTIES_IN="android/key.properties"
+KEYPROPERTIES_OUT="key.properties.encrypted"
+
+SERVICE_KEY_IN="android/service-key.json"
+SERVICE_KEY_OUT="service-key.json.encrypted"
+
+REPORT_FILE="$OUT_DIR/report.txt"

bash-sample/encrypt_functions.sh

@@ -0,0 +1,56 @@
+
+decrypt_file() {
+  local IN_FILE="$1"
+  local OUT_FILE="$2"
+
+  echo -e "${YELLOW}📄 Decrypting $IN_FILE...${NC}"
+
+  if openssl enc -aes-256-cbc -d -pbkdf2 \
+    -in "$IN_FILE" \
+    -out "$OUT_FILE" \
+    -k "$ENCRYPTION_PASSWORD"; then
+
+    echo -e "${GREEN}✅ $IN_FILE decrypted successfully -> $OUT_FILE ${NC}"
+  else
+    echo -e "${RED}❌ Failed to decrypt $IN_FILE${NC}" >&2
+    exit 1
+  fi
+
+  echo ""
+}
+
+encrypt_file() {
+    local IN_FILE="$1"
+    local OUT_FILE="$2"
+
+    echo -e "${YELLOW}📦 Encrypting $IN_FILE...${NC}"
+
+    if openssl enc -aes-256-cbc -salt -pbkdf2 \
+        -in "$IN_FILE" \
+        -out "$OUT_FILE" \
+        -k "$ENCRYPTION_PASSWORD"; then
+
+        echo -e "${GREEN}✅ $IN_FILE encrypted successfully -> $OUT_FILE${NC}"
+
+        local FILE_SIZE LINE_COUNT LAST_MODIFIED
+
+        FILE_SIZE=$(stat -c%s "$IN_FILE" 2>/dev/null || stat -f%z "$IN_FILE")
+        LINE_COUNT=$(wc -l < "$IN_FILE")
+        LAST_MODIFIED=$(stat -c%y "$IN_FILE" 2>/dev/null || stat -f"%Sm" -t "%Y-%m-%d %H:%M:%S" "$IN_FILE")
+
+        {
+          echo "File:           $IN_FILE"
+          echo "Encrypted As:   $OUT_FILE"
+          echo "Size (bytes):   $FILE_SIZE"
+          echo "Lines:   $LINE_COUNT"
+          echo "Last Modified:  $LAST_MODIFIED"
+          echo "----------------------------------------"
+          echo ""
+        } >> "$REPORT_FILE"
+
+    else
+        echo -e "${RED}❌ Failed to encrypt $IN_FILE${NC}" >&2
+        exit 1
+    fi
+    echo ""
+}

bash-sample/encrypt_secrets.sh

@@ -0,0 +1,51 @@
+#!/bin/bash
+
+# encrypt_secrets.sh
+# Encrypts environment and key files for CI/CD
+# Usage: ./encrypt_secrets.sh then enter password when prompted
+
+set -e  # Exit on error
+
+# Load shared config
+source "./encrypt_config.sh"
+source "./encrypt_functions.sh"
+
+
+echo -e "${BLUE}🔐 Enter password to encrypt your secrets:${NC}"
+read -s ENCRYPTION_PASSWORD
+
+echo ""
+echo -e "${BLUE}🔑 (Optional) Enter a password hint (leave blank to skip):${NC}"
+read PASSWORD_HINT
+
+echo ""
+echo -e "${BLUE}📝 (Optional) Enter a short note (leave blank for default):${NC}"
+read SHORT_NOTE
+
+if [ -z "$SHORT_NOTE" ]; then
+    SHORT_NOTE="Encrypted secrets for CI/CD"
+fi
+
+echo ""
+
+mkdir -p "$OUT_DIR"
+
+{
+    echo "Encryption Report"
+    echo "================="
+    echo ""
+    echo "Note: $SHORT_NOTE"
+    echo "Password Hint: ${PASSWORD_HINT:-N/A}"
+    echo "Created at: $(date)"
+    echo "================="
+    echo ""
+    echo ""
+} > "$REPORT_FILE"
+
+encrypt_file "$ENV_IN" "$OUT_DIR/$ENV_OUT"
+encrypt_file "$KEYSTORE_IN" "$OUT_DIR/$KEYSTORE_OUT"
+encrypt_file "$KEYPROPERTIES_IN" "$OUT_DIR/$KEYPROPERTIES_OUT"
+encrypt_file "$SERVICE_KEY_IN" "$OUT_DIR/$SERVICE_KEY_OUT"
+
+echo ""
+echo -e "${GREEN}✅ Encryption complete. All files saved to $OUT_DIR${NC}"

bash-sample/test_decrypt_secrets.sh

@@ -0,0 +1,27 @@
+#!/bin/bash
+
+# test_decrypt_secrets.sh
+# Decrypts encrypted environment and key files for CI/CD
+# Usage: ./test_decrypt_secrets.sh then enter password when prompted
+
+set -e  # Exit on error
+
+# Load shared config
+source "./encrypt_config.sh"
+source "./encrypt_functions.sh"
+
+
+echo -e "${BLUE}🔐 [TEST] - Enter password to encrypt your secrets:${NC}"
+read -s ENCRYPTION_PASSWORD
+
+mkdir -p "$TEST_OUT_DIR"
+
+echo -e "${YELLOW}🔐 [TEST] - Starting decryption process...${NC}"
+echo ""
+
+decrypt_file "$OUT_DIR/$ENV_OUT" "$TEST_OUT_DIR/.env.prod"
+decrypt_file "$OUT_DIR/$KEYSTORE_OUT" "$TEST_OUT_DIR/keystore.jks"
+decrypt_file "$OUT_DIR/$KEYPROPERTIES_OUT" "$TEST_OUT_DIR/key.properties"
+decrypt_file "$OUT_DIR/$SERVICE_KEY_OUT" "$TEST_OUT_DIR/service-key.json"
+
+echo -e "${GREEN}🎉 All secrets decrypted successfully!${NC}"