nixos

commit 90e4df3cccb61ba938af043cb0877033458cdc8e
parent 03a9688d22b0f3390c7d56daa0faf41f1d2ac46d
Author: MTRNord <mtrnord1@gmail.com>
Date:   Tue,  8 Aug 2023 18:42:02 +0200

Further sops setup

Diffstat:
A
.gitignore
 | 
1
+
A
.sops.yaml
 | 
7
+++++++
A
decrypt.sh
 | 
4
++++
A
encrypt.sh
 | 
3
+++

4 files changed, 15 insertions(+), 0 deletions(-)
diff --git a/.gitignore b/.gitignore
@@ -0,0 +1 @@
+age.agekey
diff --git a/.sops.yaml b/.sops.yaml
@@ -0,0 +1,7 @@
+keys:
+  - &admin_mtrnord age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+creation_rules:
+  - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
+    key_groups:
+      - age:
+          - *admin_mtrnord
diff --git a/decrypt.sh b/decrypt.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+
+export SOPS_AGE_KEY_FILE="$(pwd)/age.agekey"
+sops --ignore-mac --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --decrypt --in-place "$1"
diff --git a/encrypt.sh b/encrypt.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --encrypt --in-place "$1"