#!/usr/bin/env nix-shell
#!nix-shell -i bash ../../shell.nix
# shellcheck shell=bash
set -Eeuo pipefail
cd "$(dirname "${BASH_SOURCE[0]}")"
cd ../../

echo "Unlocking git-crypt repos..."
git crypt unlock
# Assumes vps-state was already cloned
pushd ../vps-state/
git crypt unlock
popd
echo "Done."

# git smudge after git-crypt clears file permissions
chmod 600 ./secrets/vps_box
chmod 600 ./secrets/borg_remote
cat .envrc >> ~/.buildenv

source .envrc
envsubst < ./ssh.conf >> ~/.ssh/config