nixos-wiki-infra/terraform/nixos-wiki/decrypt-age-keys.sh
2023-10-24 16:50:10 +00:00

11 lines
176 B
Bash
Executable File

#!/usr/bin/env bash
set -euo pipefail -x
mkdir -p var/lib/secrets
umask 0177
sops --extract '["age-key"]' -d "$SOPS_FILE" > ./var/lib/secrets/age
# restore umask
umask 0022