l pass: add remote unlock command

2021-10-24 22:15:02 +02:00 · 2021-10-24 22:15:02 +02:00 · 4596a2840b
commit 4596a2840b
parent ff39fb0d1f
1 changed files with 8 additions and 0 deletions
--- a/lass/2configs/pass.nix
+++ b/lass/2configs/pass.nix
@ -4,7 +4,15 @@
  users.users.mainUser.packages = with pkgs; [
    (pass.withExtensions (ext: [ ext.pass-otp ]))
    gnupg
+    (pkgs.writers.writeDashBin "unlock" ''
+      set -efu
+      HOST=$1
+
+      pw=$(pass show "admin/$HOST/luks")
+      torify sshn root@$(pass "hosts/$HOST/initrd/hostname") "echo $pw > /crypt-ramfs/passphrase"
+    '')
  ];

  programs.gnupg.agent.enable = true;
+
 }