By the way, if you happen to be using Flyway (http://flywaydb.org/) for your migrations, Gradle (http://gradle.org) for your build/tasks and Jasypt (http://jasypt.org) for encryption, here’s an example Gradle task for tying the three together.

flyway {
    StandardPBEStringEncryptor encryptor = new StandardPBEStringEncryptor();
    encryptor.setPassword('testtest'); //<-- your Jasypt password can come from anywhere.  Hopefully somewhere more secure than this.

    def flywayFile = file('flyway.properties')

    Properties flywayProps = new EncryptableProperties(encryptor)
    flywayFile.withInputStream { stream ->
        flywayProps.load(stream)
    }

    url = flywayProps.url
    user = flywayProps.username
    password = flywayProps.password

    initOnMigrate = true
}