Decrypt sops secrets in Forgejo action

2024-05-01 23:28:18 +02:00 · 2024-05-01 23:28:18 +02:00 · 65f8237015
commit 65f8237015
parent df01977bba
3 changed files with 8 additions and 4 deletions
--- a/.forgejo/workflows/deploy.yaml
+++ b/.forgejo/workflows/deploy.yaml
@ -14,4 +14,7 @@ jobs:
      - run: nix run nixpkgs#kubectl -- config set-context my-context --cluster=my-cluster --user=my-service-account
      - run: nix run nixpkgs#kubectl -- config use-context my-context
      - run: nix run nixpkgs#kubectl -- get pods
-
+      - run: |
+          mkdir -p ~/.config/sops/age
+          echo -n "${{ secrets.AGE_SECRET_KEY }}" > ~/.config/sops/age/keys.txt
+      - run: nix run nixpkgs#sops --decrypt src/secrets/sops.yaml | grep "paperless-ngx:"