When decrypting secrets, pass unencrypted files straight through

This commit is contained in:
Peter Jones 2019-01-03 14:32:11 -07:00
parent b2571a8c30
commit accdc1bf54
No known key found for this signature in database
GPG key ID: 9DAFAA8D01941E49

View file

@ -114,21 +114,29 @@ decrypt_file() {
mkdir -p "$(dirname "$dest_file")"
echo "==> $dest_file"
if [ -n "$symmetric_key" ]; then
gpg --batch \
--quiet \
--decrypt \
--passphrase-fd 0 \
--pinentry-mode loopback \
"$file" > "$dest_file" \
<<<"$symmetric_key"
else
gpg --use-agent \
--quiet \
--decrypt \
--quiet \
"$file" > "$dest_file"
fi
case "$file" in
*.gpg) # File is encrypted, use gpg:
if [ -n "$symmetric_key" ]; then
gpg --batch \
--quiet \
--decrypt \
--passphrase-fd 0 \
--pinentry-mode loopback \
"$file" > "$dest_file" \
<<<"$symmetric_key"
else
gpg --use-agent \
--quiet \
--decrypt \
--quiet \
"$file" > "$dest_file"
fi
;;
*) # Just copy the file as-is:
cp "$file" "$dest_file"
;;
esac
}
################################################################################