aboutsummaryrefslogtreecommitdiff
path: root/regenerate-secrets.sh
diff options
context:
space:
mode:
Diffstat (limited to 'regenerate-secrets.sh')
-rwxr-xr-xregenerate-secrets.sh7
1 files changed, 6 insertions, 1 deletions
diff --git a/regenerate-secrets.sh b/regenerate-secrets.sh
index fbb79883..a93b4488 100755
--- a/regenerate-secrets.sh
+++ b/regenerate-secrets.sh
@@ -5,6 +5,7 @@ encto () {
# its decrypted content does not change, so leave it alone.
[ -e "$2" ] && return 0
hostkey=$(awk '$1 ~ /^\[?'"$1"'\.(twilken\.net|local|fritz\.box)\]?(:[0-9]+)?$/ && $2 == "ssh-ed25519" { print $2, $3 }' ~/.ssh/known_hosts)
+ mkdir -p "$(dirname "$2")"
age -e -a -r "${hostkey:?No hostkey found for $1}" -o "$2"
}
@@ -30,7 +31,7 @@ for host in lap lud vin frm btl; do
done
# Restic repository passwords.
-for repo in vin-grafana timo-laptop timo-framework timo-battleship timo-phone timo-sync; do
+for repo in vin-grafana vin-electricity-conso-db timo-laptop timo-framework timo-battleship timo-phone timo-sync; do
store_restic vin $repo
done
@@ -54,3 +55,7 @@ EOF
encto lud tw/system/files/paperless-secret-key.enc << EOF
PAPERLESS_SECRET_KEY=$(pass show computers/lud/paperless/secret-key | head -1)
EOF
+
+encto vin tw/services/files/personal-data-exporter/conso.json << EOF
+{"prm": "$(pass www/conso-api | sed -rn '/^prm: /s///p')", "api-token": "$(pass www/conso-api | head -1)"}
+EOF