path: root/nixops/scripts/with_env

#!/bin/bash

if [ -z "$NIXOPS" ]; then
  echo "Please set NIXOPS to the nixops command"
  exit 1;
fi

if [ -z "$NIXOPS_CONFIG_PASS_SUBTREE_PATH" ]; then
  echo "Please set NIXOPS_CONFIG_PASS_SUBTREE_PATH to the password-store subtree path"
  exit 1;
fi

TEMP=$(mktemp -d /tmp/XXXXXX-nixops-files)
chmod go-rwx $TEMP

finish() {
  rm -rf "$TEMP"
  $NIXOPS set-args --unset privateFiles
}

trap finish EXIT

# pass cannot "just" list files in a directory without showing a tree :(
files=$(pass ls $NIXOPS_CONFIG_PASS_SUBTREE_PATH/Nixops/files | sed -e '1d' -e 's/^.* //')

for file in $files; do
  pass show "$NIXOPS_CONFIG_PASS_SUBTREE_PATH/Nixops/files/$file" > $TEMP/$file
done
$NIXOPS set-args --argstr privateFiles "$TEMP"

"$@"