nix machine / user configurations

build(deploy): load webhook secrets better

ptr.pet 15c68fae 248ad247

verified
Changed files
+21 -7
secrets
+5 -7
deploy.nu
···
path add /nix/var/nix/profiles/default/bin
-
source-env secrets/deploy-webhook.nu
+
# load webhook secrets
+
rage -d -i ./ssh_key ./secrets/deployWebhook.age | from toml | load-env
def webhook [title: string, content: string, exit_code?: number, ping?: bool = false] {
let type = if $exit_code == null { "⌛" } else if $exit_code == 0 { "✔️" } else { "❌" }
···
}
}
-
def main [msg?: string] {
+
def main [] {
webhook "deploy" "=== started deploying all ==="
update-input "blog"
+
# try committing flake updates
try {
git add flake.lock
-
let commit_msg = if $msg == null {
-
"chore: update flake dependencies (deploy)"
-
} else {
-
$msg
-
}
+
let commit_msg = "chore: update flake dependencies (deploy)"
git commit -m $"($commit_msg) [skip ci]"
git push
}
+15
secrets/deployWebhook.age
···
+
age-encryption.org/v1
+
-> ssh-rsa Abmvag
+
ADI5iHyNoBVxkKKLMkFVg+kIr/9W3Doqacx+Ff/K8sxNpaSJwyHsEc5bBznbdRjZ
+
nqXkCGszW7N2Aue6/w/vL1S2M/2vGChTSkket0o14n4roRYJqC3RjeBMha/U6lR0
+
ONDAUH1KD7wkHjxOvRvIrtlmxTFjruoXMuimSEnX2fE9CNB2S31DSLCTNPb5u4TM
+
ptQAomlzWGp/Yq6EqP04BQcs5D8YEcCDN8E0efhs6ueGkKUsXBAygixAJMRoaaO9
+
v0uI2eqQ8ejT6p4hJW3b5HaPnDJRguAvCeyOZReJC6ulgg3sEN6WwQ5zldhCZeK0
+
o/j3LSbA6ll9heaXylo+Vcp3xl1j5XRhSjjmGW5hwYywyWjTfOkUMJkJ1nj/J9So
+
CmjvVGV8rW3tJRAoJy00Dvbmd2YIMTJtX80UPTzVwfDYya8BkoSPWbLHjym5MX1I
+
Cwq3nrbZsu7K9IbZZB75qFmHW+jsOvPAbeAZ3qS/pxrgUy1pZcRgO6J1fWgXLIXW
+
cmQoQAcPHHg/5Qodvosyl17X1UK2RDxRwxgiI468BVuHGpiQ85I3qrhFSmfkvir6
+
b7HnJaWzQpYMA1Nmzi26zlZ+mr+UPkXxSZJIO+hF/612AoV1ZU1hDDgisL9kBDqZ
+
Ap/dE4cX1bVuSo3N8DsiPYHdNpBj2YsL7KXO3/oDVJU
+
--- kCk4PQYPc2avxG0luSFIQlieeMvhhBRV/xOQN52bCXA
+
V�Y;���aHma��-�axQ����>��B'r`��%�r�a��^�.$}�l�;����&��̲MjH:C����X�:E��k��58.�Jd�]TCr�Z)��ה��mm�wg�{�� nj��Ͱ'f�� ��ωQ�-�R�_���2���~(���t��H�U�
+1
secrets/secrets.nix
···
yusdacra
wolumonde
];
+
"deployWebhook.age".publicKeys = [yusdacra];
}