2016-01-28 02:59:31 +01:00
|
|
|
#!/usr/bin/env bash
|
|
|
|
if ! [ -e deploy_key ] || ! [ -e secrets.nix ]
|
|
|
|
then
|
2016-04-21 22:33:02 +02:00
|
|
|
gpg --decrypt-files secrets.nix.asc deploy_key.asc keys/*.asc
|
2016-01-28 02:59:31 +01:00
|
|
|
sudo chgrp nixbld deploy_key
|
|
|
|
chmod 640 deploy_key
|
|
|
|
fi
|
|
|
|
case $1 in
|
|
|
|
local)
|
|
|
|
export NIX_PATH=/nix/var/nix/profiles/per-user/root/channels/nixos:nixos-config=`pwd`/ascanius/configuration.nix:secrets=`pwd`/secrets.nix
|
|
|
|
eval ${@:2}
|
|
|
|
;;
|
|
|
|
remote)
|
2016-09-19 21:02:33 +02:00
|
|
|
export NIX_PATH="nixpkgs=https://nixos.org/channels/nixos-16.09/nixexprs.tar.xz:nixos-config=`pwd`/$2/configuration.nix:ssh-id-file=`pwd`/deploy_key":secrets=`pwd`/secrets.nix
|
2016-09-17 16:02:14 +02:00
|
|
|
eval ${@:3}
|
2016-04-14 14:02:16 +02:00
|
|
|
;;
|
2016-01-28 02:59:31 +01:00
|
|
|
local-deploy)
|
|
|
|
sudo $0 local nixos-rebuild switch
|
|
|
|
;;
|
|
|
|
remote-deploy)
|
2016-09-17 16:02:14 +02:00
|
|
|
$0 remote $2 nixos-rebuild --build-host localhost --target-host ${@:3}
|
2016-01-28 02:59:31 +01:00
|
|
|
;;
|
2016-04-21 22:33:02 +02:00
|
|
|
update-encrypt)
|
2016-04-29 01:05:09 +02:00
|
|
|
gpg -a -r yorick --encrypt-files secrets.nix deploy_key keys/*.key
|
2016-01-28 02:59:31 +01:00
|
|
|
esac
|