1
0
Fork 0
server-configuration/terraform/nixos-vpn/decrypt-age-keys.sh

10 lines
182 B
Bash
Executable file

#!/usr/bin/env bash
set -euo pipefail -x
mkdir -p var/lib/secrets
umask 0177
sops --extract '["age-key"]' --decrypt "$SOPS_FILE" >./var/lib/secrets/age
# restore umask
umask 0022