feat(scripts): Add rekey-all

2025-05-16 15:07:03 +02:00 · 2025-05-16 15:07:03 +02:00 · 48e6f7f739
commit 48e6f7f739
parent 2e6ba17cdf
2 changed files with 16 additions and 0 deletions
--- a/scripts/default.nix
+++ b/scripts/default.nix
@ -35,6 +35,10 @@ let
    ];
    launch-vm = [ colmena ];
    list-nodes = [ jq ];
+    rekey-all = [
+      colmena
+      jq
+    ];
  };

  self = mapAttrs (
--- a/scripts/rekey-all.sh
+++ b/scripts/rekey-all.sh
@ -0,0 +1,12 @@
+# SPDX-FileCopyrightText: 2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>
+#
+# SPDX-License-Identifier: EUPL-1.2
+
+set -o errexit
+set -o nounset
+set -o pipefail
+shopt -s lastpipe
+
+for sdir in $(colmena eval -E '{ nodes, lib, ... }: builtins.map builtins.toString (lib.unique (lib.concatLists (lib.mapAttrsToList (_: { config, ... }: lib.optionals (lib.hasAttr "age-secrets" config) config.age-secrets.sources) nodes)))' | jq -r '.[]'); do
+  (cd "$sdir" && agenix -r)
+done