diff options
| author | lassulus <lassulus@lassul.us> | 2021-10-24 22:15:02 +0200 |
|---|---|---|
| committer | lassulus <lassulus@lassul.us> | 2021-10-24 22:15:02 +0200 |
| commit | 4596a2840b6a5c04acd4c2aa05280e425074c34e (patch) | |
| tree | 4b2eb1cd5765946f8b8fe366862a8de64b5c30e7 /lass | |
| parent | ff39fb0d1f436e1587c71ffa1feb462fd4d784e6 (diff) | |
l pass: add remote unlock command
Diffstat (limited to 'lass')
| -rw-r--r-- | lass/2configs/pass.nix | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/lass/2configs/pass.nix b/lass/2configs/pass.nix index 48070ea06..8ec3ac092 100644 --- a/lass/2configs/pass.nix +++ b/lass/2configs/pass.nix @@ -4,7 +4,15 @@ users.users.mainUser.packages = with pkgs; [ (pass.withExtensions (ext: [ ext.pass-otp ])) gnupg + (pkgs.writers.writeDashBin "unlock" '' + set -efu + HOST=$1 + + pw=$(pass show "admin/$HOST/luks") + torify sshn root@$(pass "hosts/$HOST/initrd/hostname") "echo $pw > /crypt-ramfs/passphrase" + '') ]; programs.gnupg.agent.enable = true; + } |