···

       
2
       
2
       
 
       
{

     

       
3
       
3
       
 
       
  name,

     

       
4
       
4
       
 
       
  content,

     

       
5
       
5
       
-
       
}:

     

       
6
       
6
       
-
       
builtins.toFile name (builtins.toJSON content)

     

       
5
       
5
       
+
       
}: let

     

       
6
       
6
       
+
       
  pkgs = import <nixpkgs> {}; # uses builtins.currentSystem

     

       
7
       
7
       
+
       
in

     

       
8
       
8
       
+
       
  pkgs.writeText name (builtins.toJSON content)

     

···

       
13
       
13
       
 
       
	set -euxo pipefail

     

       
14
       
14
       
 
       
	rm ../.sops.yaml || true

     

       
15
       
15
       
 
       
	# mv ../.sops.yaml{,.bak} 2>/dev/null || true

     

       
16
       
16
       
-
       
	OUT=$(nix-instantiate --eval build-yaml.nix --argstr name ".sops.yaml" --arg content "import ../.sops.nix" | jq -r)

     

       
16
       
16
       
+
       
	OUT=$(nix-build build-yaml.nix --argstr name ".sops.yaml" --arg content "import ../.sops.nix")

     

       
17
       
17
       
 
       
	echo -e "# WARNING: This is a generated file. DO NOT EDIT DIRECTLY!\n# See .sops.nix and utils/build-yaml.nix for more details." \

     

       
18
       
18
       
 
       
		| cat - $OUT > ../.sops.yaml

     

       
19
       
19