23 lines
919 B
Bash
23 lines
919 B
Bash
AGE_DIR=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" &> /dev/null && pwd)
|
|
|
|
# Check for existing private key
|
|
if ! [[ -f ~/.age/key ]]; then
|
|
mkdir -p $HOME/.age
|
|
age-keygen -o $HOME/.age/key > $AGE_DIR/../$HOSTNAME/.age-pubkey
|
|
echo "Pubkey added to $AGE_DIR/.age-pubkeys"
|
|
echo "Remember to add, commit, push, the new key, and then re-encrypt all secrets for the new pubkey list."
|
|
fi
|
|
|
|
# Configure private key path, and pubkey list env vars.
|
|
export SOPS_AGE_KEY_FILE=$HOME/.age/key
|
|
#echo 'export SOPS_AGE_RECIPIENTS=$(cat $AGE_DIR/.age-pubkeys)' >> $HOME/.bashrc
|
|
#echo 'export SOPS_AGE_KEY_FILE=$HOME/.age/key' >> $HOME/.bashrc
|
|
|
|
alias enc="$AGE_DIR/.age-encrypt.sh"
|
|
alias dec="$AGE_DIR/.age-decrypt.sh"
|
|
|
|
# Configure the git filters
|
|
# git config --local filter.sops.smudge $AGE_DIR/.age-decrypt.sh
|
|
# git config --local filter.sops.clean $AGE_DIR/.age-encrypt.sh
|
|
# git config --local filter.sops.required true
|