24 lines
474 B
Bash
Executable File
24 lines
474 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -euo pipefail
|
|
|
|
ENCRYPT_KEY="${1}"
|
|
KEY_FILE="$(mktemp)"
|
|
|
|
trap "rm -rf ${KEY_FILE} 2>/dev/null" INT TERM EXIT
|
|
|
|
echo "${ENCRYPT_KEY:?}" > "${KEY_FILE}"
|
|
|
|
function decrypt() {
|
|
if ! command -v age 1>/dev/null; then
|
|
echo "age not installed"
|
|
exit 1
|
|
fi
|
|
SRC="${1}"
|
|
DST="${2}"
|
|
age --decrypt -i "${KEY_FILE}" -o "${DST:?}" "${SRC:?}"
|
|
}
|
|
|
|
decrypt secrets/keystore.jks.age keystore.jks
|
|
decrypt secrets/keystore.properties.age keystore.properties
|