Malin
bc9f96cbd4
- Set Spanish as default language with ephemeral/encrypted privacy focus - Translate all user-facing strings and legal pages to Spanish - Replace Norwegian flag with Spanish flag in footer - Remove Hemmelig/terces.cloud links, add cloudhost.es sponsorship - Rewrite PrivacyPage: zero data collection, ephemeral design emphasis - Rewrite TermsPage: Spanish law, RGPD, paste.es/CloudHost.es references - Update PWA manifest, HTML meta tags, package.json branding - Rename webhook headers to X-Paste-Event / X-Paste-Signature - Update API docs title and contact to paste.es / cloudhost.es Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
127 lines
3.7 KiB
Markdown
127 lines
3.7 KiB
Markdown
# Hemmelig CLI (Go)
|
|
|
|
A standalone Go binary for creating encrypted, self-destructing secrets via [Hemmelig](https://hemmelig.app).
|
|
|
|
```
|
|
_ _ _ _
|
|
| | | | ___ _ __ ___ _ __ ___ ___| (_) __ _
|
|
| |_| |/ _ \ '_ ` _ \| '_ ` _ \ / _ \ | |/ _` |
|
|
| _ | __/ | | | | | | | | | | __/ | | (_| |
|
|
|_| |_|\___|_| |_| |_|_| |_| |_|\___|_|_|\__, |
|
|
|___/
|
|
```
|
|
|
|
## Installation
|
|
|
|
### Download Binary
|
|
|
|
Download the pre-built binary for your platform from the [CLI releases](https://github.com/HemmeligOrg/Hemmelig.app/releases?q=cli-v&expanded=true).
|
|
|
|
Replace `VERSION` below with the desired version (e.g., `1.0.0`):
|
|
|
|
#### Linux (amd64)
|
|
|
|
```bash
|
|
VERSION=1.0.1
|
|
curl -L https://github.com/HemmeligOrg/Hemmelig.app/releases/download/cli-v${VERSION}/hemmelig-linux-amd64 -o hemmelig
|
|
chmod +x hemmelig
|
|
sudo mv hemmelig /usr/local/bin/
|
|
```
|
|
|
|
#### Linux (arm64)
|
|
|
|
```bash
|
|
VERSION=1.0.1
|
|
curl -L https://github.com/HemmeligOrg/Hemmelig.app/releases/download/cli-v${VERSION}/hemmelig-linux-arm64 -o hemmelig
|
|
chmod +x hemmelig
|
|
sudo mv hemmelig /usr/local/bin/
|
|
```
|
|
|
|
#### macOS (Apple Silicon)
|
|
|
|
```bash
|
|
VERSION=1.0.1
|
|
curl -L https://github.com/HemmeligOrg/Hemmelig.app/releases/download/cli-v${VERSION}/hemmelig-darwin-arm64 -o hemmelig
|
|
chmod +x hemmelig
|
|
sudo mv hemmelig /usr/local/bin/
|
|
```
|
|
|
|
#### macOS (Intel)
|
|
|
|
```bash
|
|
VERSION=1.0.1
|
|
curl -L https://github.com/HemmeligOrg/Hemmelig.app/releases/download/cli-v${VERSION}/hemmelig-darwin-amd64 -o hemmelig
|
|
chmod +x hemmelig
|
|
sudo mv hemmelig /usr/local/bin/
|
|
```
|
|
|
|
#### Windows (PowerShell)
|
|
|
|
```powershell
|
|
$VERSION = "1.0.1"
|
|
Invoke-WebRequest -Uri "https://github.com/HemmeligOrg/Hemmelig.app/releases/download/cli-v$VERSION/hemmelig-windows-amd64.exe" -OutFile "hemmelig.exe"
|
|
# Move to a directory in your PATH, e.g.:
|
|
Move-Item hemmelig.exe "$env:LOCALAPPDATA\Microsoft\WindowsApps\hemmelig.exe"
|
|
```
|
|
|
|
#### Verify Download
|
|
|
|
```bash
|
|
VERSION=1.0.1
|
|
curl -L https://github.com/HemmeligOrg/Hemmelig.app/releases/download/cli-v${VERSION}/checksums.txt -o checksums.txt
|
|
sha256sum -c checksums.txt --ignore-missing
|
|
```
|
|
|
|
### Build from Source
|
|
|
|
```bash
|
|
go build -o hemmelig .
|
|
```
|
|
|
|
## Usage
|
|
|
|
```bash
|
|
# Create a simple secret
|
|
hemmelig "my secret message"
|
|
|
|
# With a title and custom expiration
|
|
hemmelig "API key: sk-1234" -t "Production API Key" -e 7d
|
|
|
|
# Password protected
|
|
hemmelig "sensitive data" -p "mypassword"
|
|
|
|
# Multiple views allowed
|
|
hemmelig "shared config" -v 5
|
|
|
|
# Pipe from stdin
|
|
cat config.json | hemmelig -t "Config file"
|
|
|
|
# Use a self-hosted instance
|
|
hemmelig "internal secret" -u https://secrets.company.com
|
|
```
|
|
|
|
## Options
|
|
|
|
| Option | Description |
|
|
| ----------------------- | ------------------------------------------------------ |
|
|
| `-t, --title <title>` | Set a title for the secret |
|
|
| `-p, --password <pass>` | Protect with a password |
|
|
| `-e, --expires <time>` | Expiration: 5m, 30m, 1h, 4h, 12h, 1d, 3d, 7d, 14d, 28d |
|
|
| `-v, --views <number>` | Max views (1-9999, default: 1) |
|
|
| `-b, --burnable` | Burn after first view (default) |
|
|
| `--no-burnable` | Don't burn until all views used |
|
|
| `-u, --url <url>` | Base URL (default: https://hemmelig.app) |
|
|
| `-h, --help, /?` | Show help |
|
|
| `--version` | Show version |
|
|
|
|
## Security
|
|
|
|
- All encryption happens locally using AES-256-GCM
|
|
- Keys are derived using PBKDF2 with 600,000 iterations
|
|
- The decryption key is in the URL fragment (`#decryptionKey=...`), which is never sent to the server
|
|
- The server only stores encrypted data
|
|
|
|
## License
|
|
|
|
MIT
|