blob: 6aa73c2afe6b0ff5e34163df878db227e3a50d10 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
|
{ pkgs }:
[
(pkgs.writeScriptBin "update-deps" "nix flake update --commit-lock-file")
(pkgs.writeShellScriptBin "gcloud-auth" ''
set -xeuo pipefail
${pkgs.google-cloud-sdk}/bin/gcloud auth print-identity-token > /dev/null 2>&1 || \
${pkgs.google-cloud-sdk}/bin/gcloud auth login --quiet
${pkgs.google-cloud-sdk}/bin/gcloud auth application-default print-access-token > /dev/null 2>&1 || \
${pkgs.google-cloud-sdk}/bin/gcloud auth application-default login --quiet
'')
(pkgs.writeShellScriptBin "tofu-apply" ''
set -xeuo pipefail
${pkgs.google-cloud-sdk}/bin/gcloud storage buckets describe \
gs://fcuny-infra-tofu-state \
--project=fcuny-infra \
--quiet || \
${pkgs.google-cloud-sdk}/bin/gcloud storage buckets create \
gs://fcuny-infra-tofu-state \
--project=fcuny-infra \
--uniform-bucket-level-access \
--public-access-prevention \
--location=us-west1 \
--default-storage-class=STANDARD \
--quiet
TMPDIR=$(mktemp -d)
trap 'rm -rf "$TMPDIR"' EXIT
${pkgs.coreutils}/bin/install -Dm 0644 ${
import ../tofu/backups.nix {
inherit
pkgs
;
}
} "$TMPDIR/backups/backups.tf.json"
${pkgs.opentofu}/bin/tofu -chdir="$TMPDIR/backups" init
${pkgs.opentofu}/bin/tofu -chdir="$TMPDIR/backups" apply -auto-approve
'')
]
|
