nixops/scripts/with_env

   1 #!/usr/bin/env bash
   2
   3 if [ -z "$NIXOPS_ENV_LOADED" ]; then
   4   echo "Please load the environment with direnv"
   5   exit 1;
   6 fi
   7
   8 umask 0077
   9 TEMP=$(mktemp -d /tmp/XXXXXX-nixops-files)
  10 chmod go-rwx $TEMP
  11
  12 finish() {
  13   rm -rf "$TEMP"
  14 }
  15
  16 trap finish EXIT
  17
  18 sops -d secrets/vars.yml | yq -r .ssl_keys.nix_repository > $TEMP/id_ed25519
  19
  20 export SSH_IDENTITY_FILE="$TEMP/id_ed25519"
  21
  22 "$@"