homelab/scripts/encrypt_flux.sh

#!/bin/sh

set -eu

if [ -z "${AGE_KEY_NO_PQ}" ]; then
	echo "unbound variable"
fi
if [ ! -f "${AGE_KEY_NO_PQ}" ]; then
	echo "Error: ${AGE_KEY_NO_PQ} file does not exist"
	exit 1
fi

PUBLIC_KEY=$(age-keygen -y $AGE_KEY_NO_PQ)

SECRETS_ENC_PATH=$HYDRA_SECRETS_PATH
mkdir -p $SECRETS_ENC_PATH
for FILE in $SECRETS_FOLDER/*; do
	sops --encrypt --in-place $FILE

  FILENAME="${FILE##*/}"
  DEST=$SECRETS_ENC_PATH/$FILENAME
  echo Moving encrypted file to $DEST
  mv $FILE $DEST
done