--- /dev/null
+#!/bin/bash
+
+if [ -z "$NIXOPS" ]; then
+ echo "Please set NIXOPS to the nixops command"
+ exit 1;
+fi
+
+if [ -z "$NIXOPS_CONFIG_PASS_SUBTREE_PATH" ]; then
+ echo "Please set NIXOPS_CONFIG_PASS_SUBTREE_PATH to the password-store subtree path"
+ exit 1;
+fi
+
+TEMP=$(mktemp -d /tmp/XXXXXX-nixops-files)
+chmod go-rwx $TEMP
+
+finish() {
+ rm -rf "$TEMP"
+ $NIXOPS set-args --unset privateFiles
+}
+
+trap finish EXIT
+
+# pass cannot "just" list files in a directory without showing a tree :(
+files=$(pass ls $NIXOPS_CONFIG_PASS_SUBTREE_PATH/Nixops/files | sed -e '1d' -e 's/^.* //')
+
+for file in $files; do
+ pass show "$NIXOPS_CONFIG_PASS_SUBTREE_PATH/Nixops/files/$file" > $TEMP/$file
+done
+$NIXOPS set-args --argstr privateFiles "$TEMP"
+
+"$@"