mirror of
https://github.com/nmasur/dotfiles
synced 2024-11-27 00:45:37 +00:00
20 lines
533 B
Nix
20 lines
533 B
Nix
|
{ pkgs, ... }: {
|
||
|
|
|
||
|
|
# nix run github:nmasur/dotfiles#encrypt-secret > private/mysecret.age
|
||
|
|
|
||
|
|
type = "app";
|
||
|
|
|
||
|
|
program = builtins.toString (pkgs.writeShellScript "encrypt-secret" ''
|
||
|
|
printf "\nEnter the secret data to encrypt for all hosts...\n\n" 1>&2
|
||
|
|
read -p "Secret: " secret
|
||
|
|
printf "\nEncrypting...\n\n" 1>&2
|
||
|
|
tmpfile=$(mktemp)
|
||
|
|
echo "''${secret}" > ''${tmpfile}
|
||
|
|
${pkgs.age}/bin/age --encrypt --armor --recipients-file ${
|
||
|
|
builtins.toString ../hosts/public-keys
|
||
|
|
} $tmpfile
|
||
|
|
rm $tmpfile
|
||
|
|
'');
|
||
|
|
|
||
|
|
}
|