Env variable in my profile config.yaml

[spielcrypto]

Discord user ID

spielcrypto

Describe your question in detail.

my profiles config.yaml looks like this:

profiles:
  testnet:
    private_key: "MY PRIVATE KEY"
    public_key: "MY PUBLIC KEY"
    account: MY ACCOUNT
    rest_url: "https://fullnode.testnet.aptoslabs.com"
    faucet_url: "https://faucet.testnet.aptoslabs.com"

I tried to do this:

profiles:
  testnet:
    private_key: ${PRIVATE_KEY}
    public_key: "MY PUBLIC KEY"
    account: MY ACCOUNT
    rest_url: "https://fullnode.testnet.aptoslabs.com"
    faucet_url: "https://faucet.testnet.aptoslabs.com"

However doesn't work, when I try to publish a contract I get this error:
"Unexpected error: profiles.testnet: DeserializationError at line 10 column 12"

even executing with the client in javascript there is not way to pass the yaml config file already rendered with ejs.

Is there anyway to pass env var to the config.yaml? otherwise you need to implement something urgently, expose private key into the file is a high risk for the deployed

What error, if any, are you getting?

No response

What have you tried or looked at? Or how can we reproduce the error?

No response

Which operating system are you using?

Linux (Ubuntu, Fedora, Windows WSL, etc.)

Which SDK or tool are you using? (if any)

Aptos CLI

Describe your environment or tooling in detail

aptos-move 3.4.1

[MoonShiesty]

you can pass a private key into the cli using --private-key or --private-key-file for actions that require a signer and leave the private key in config.yaml empty or if you're using javascript load the private key from env using the ts-sdk

[spielcrypto]

ok but if I load from the javascript how can I pass to the aptos client? for example here:

require("dotenv").config();
const fs = require("node:fs");
const yaml = require("js-yaml");
const cli = require("@aptos-labs/ts-sdk/dist/common/cli/index.js");

const config = yaml.load(fs.readFileSync("./.aptos/config.yaml", "utf8"));
const moduleAddress =
  config["profiles"][process.env.VITE_APP_NETWORK]["account"];

const collector = process.env.VITE_COLLECTOR;

async function publish() {
  const move = new cli.Move();

  await move.publish({
    packageDirectoryPath: "ghostly-contract",
    namedAddresses: {
      // Publish module to account address
      ghostly_addr: moduleAddress,
      collector,
    },
    profile: process.env.VITE_APP_NETWORK,
  });
}
publish();

I don't see way to pass the private key to the client in my nodejs script:

/**
     * Function to publish the modules to the publisher account on the Aptos blockchain
     *
     * @param args.packageDirectoryPath Path to a move package (the folder with a Move.toml file)
     * @param args.namedAddresses  Named addresses for the move binary
     * @example
     * {
     *  alice:0x1234, bob:0x5678
     * }
     * @param args.profile optional Profile to use from the config file.
     *
     * @returns stdout
     */
    publish(args: {
        packageDirectoryPath: string;
        namedAddresses: Record<string, AccountAddress>;
        profile?: string;
    }): Promise<string>;

/**
     * Function to initialize current directory for Aptos
     *
     * Configuration will be pushed into .aptos/config.yaml
     * @param args.network optional Network type argument to use for default settings, default is local
     * @param args.profile optional Profile to use from the config file, default is 'default'
     * This will be used to override associated settings such as the REST URL, the Faucet URL, and the private key arguments.
     *
     * @returns stdout
     */
    init(args: {
        network?: Network;
        profile?: string;
    }): Promise<string>;

[spielcrypto]

ok but if I load from the javascript how can I pass to the aptos client? for example here:

require("dotenv").config();
const fs = require("node:fs");
const yaml = require("js-yaml");
const cli = require("@aptos-labs/ts-sdk/dist/common/cli/index.js");

const config = yaml.load(fs.readFileSync("./.aptos/config.yaml", "utf8"));
const moduleAddress =
  config["profiles"][process.env.VITE_APP_NETWORK]["account"];

const collector = process.env.VITE_COLLECTOR;

async function publish() {
  const move = new cli.Move();

  await move.publish({
    packageDirectoryPath: "ghostly-contract",
    namedAddresses: {
      // Publish module to account address
      ghostly_addr: moduleAddress,
      collector,
    },
    profile: process.env.VITE_APP_NETWORK,
  });
}
publish();

I don't see way to pass the private key to the client in my nodejs script:

/**
     * Function to publish the modules to the publisher account on the Aptos blockchain
     *
     * @param args.packageDirectoryPath Path to a move package (the folder with a Move.toml file)
     * @param args.namedAddresses  Named addresses for the move binary
     * @example
     * {
     *  alice:0x1234, bob:0x5678
     * }
     * @param args.profile optional Profile to use from the config file.
     *
     * @returns stdout
     */
    publish(args: {
        packageDirectoryPath: string;
        namedAddresses: Record<string, AccountAddress>;
        profile?: string;
    }): Promise<string>;

/**
     * Function to initialize current directory for Aptos
     *
     * Configuration will be pushed into .aptos/config.yaml
     * @param args.network optional Network type argument to use for default settings, default is local
     * @param args.profile optional Profile to use from the config file, default is 'default'
     * This will be used to override associated settings such as the REST URL, the Faucet URL, and the private key arguments.
     *
     * @returns stdout
     */
    init(args: {
        network?: Network;
        profile?: string;
    }): Promise<string>;

@MoonShiesty could answer this comment? thanks!