dotfiles/apps/reencrypt-secrets.nix

28 lines
741 B
Nix
Raw Normal View History

2022-10-16 01:32:39 +00:00
{ pkgs, ... }: {
# nix run github:nmasur/dotfiles#reencrypt-secrets ./private
type = "app";
program = builtins.toString (pkgs.writeShellScript "reencrypt-secrets" ''
if [ $# -eq 0 ]; then
echo "Must provide directory to reencrypt."
exit 1
fi
encrypted=$1
for encryptedfile in ''${1}/*; do
tmpfile=$(mktemp)
echo "Decrypting ''${encryptedfile}..."
${pkgs.age}/bin/age --decrypt \
--identity ~/.ssh/id_ed25519 $encryptedfile > $tmpfile
echo "Encrypting ''${encryptedfile}..."
${pkgs.age}/bin/age --encrypt --armor --recipients-file ${
2023-02-21 01:02:21 +00:00
builtins.toString ../public-keys
2022-10-16 01:32:39 +00:00
} $tmpfile > $encryptedfile
rm $tmpfile
done
echo "Finished."
'');
}