nixos-wiki-infra/terraform/nixos-wiki/decrypt-age-keys.sh

#!/usr/bin/env bash

set -euo pipefail -x

mkdir -p var/lib/secrets

umask 0177
sops --extract '["age-key"]' -d "$SOPS_FILE" >./var/lib/secrets/age
# restore umask
umask 0022
add actual wiki configuration and lots of modernisations 2023-10-24 17:33:05 +02:00			`#!/usr/bin/env bash`

fix sops file 2023-10-24 18:37:53 +02:00			`set -euo pipefail -x`

add actual wiki configuration and lots of modernisations 2023-10-24 17:33:05 +02:00			`mkdir -p var/lib/secrets`

			`umask 0177`
apply treemft 2024-07-06 11:13:43 +02:00			`sops --extract '["age-key"]' -d "$SOPS_FILE" >./var/lib/secrets/age`
add actual wiki configuration and lots of modernisations 2023-10-24 17:33:05 +02:00			`# restore umask`
			`umask 0022`