142 lines
4.2 KiB
Plaintext
142 lines
4.2 KiB
Plaintext
# vim: set ft=xonsh :
|
|
|
|
from tempfile import NamedTemporaryFile, TemporaryDirectory
|
|
|
|
def bw_unlock():
|
|
"""Unlocks the BitWarden CLI and adds the resulting session code to the
|
|
current environment variables. Also returns the code for them."""
|
|
if "BW_SESSION" in ${...}:
|
|
return $BW_SESSION
|
|
result = !(bw unlock --raw)
|
|
while result.returncode != 0:
|
|
result = !(bw unlock --raw)
|
|
$BW_SESSION = result.output.strip()
|
|
return $BW_SESSION
|
|
|
|
def vpn(con, bwname):
|
|
nmcli c down @(con)
|
|
bw_unlock()
|
|
base=$(bw get password @(bwname))
|
|
secret=$(bw get totp @(bwname))
|
|
#echo vpn.secrets.password:${base}$(oathtool -b -d "${digits}" -s "${period}" --totp "${secret}") > "${f}"
|
|
|
|
with NamedTemporaryFile(delete_on_close=False) as fp:
|
|
secret = f"vpn.secrets.password:{base}{secret}"
|
|
fp.write(secret.encode("utf-8"))
|
|
fp.close()
|
|
nmcli c up @(con) passwd-file @(fp.name)
|
|
|
|
def _unlock(args):
|
|
bw_unlock()
|
|
aliases['unlock'] = _unlock
|
|
|
|
def _ivr(args):
|
|
vpn("350Main", "IVR Technology")
|
|
aliases['ivr'] = _ivr
|
|
|
|
def _ivr2(args):
|
|
vpn("gregory_hellings@ra.ivrtechnology.com", "IVR Technology")
|
|
aliases['ivr2'] = _ivr2
|
|
|
|
def _glrestart(args):
|
|
sudo nixos-container run gitlab -- systemctl restart gitlab
|
|
sudo nixos-container run gitlab -- systemctl restart nginx
|
|
aliases['glrestart'] = _glrestart
|
|
|
|
def _aws_creds(args):
|
|
$AWS_ACCESS_KEY_ID=$(bw get username "AWS Access Key")
|
|
$AWS_SECRET_ACCESS_KEY=$(bw get password "AWS Access Key")
|
|
aliases['aws_creds'] = _aws_creds
|
|
|
|
def _rebuild(args):
|
|
system = uname()
|
|
hostname = system.nodename
|
|
if system.sysname == 'Darwin':
|
|
sudo darwin-rebuild switch
|
|
else:
|
|
with TemporaryDirectory() as td:
|
|
pushd @(td)
|
|
nom build f"/etc/nixos#nixosConfigurations.{hostname}.config.system.build.toplevel"
|
|
if g`result`:
|
|
nvd diff /run/current-system result
|
|
sudo result/bin/switch-to-configuration switch
|
|
popd
|
|
aliases['rebuild'] = _rebuild
|
|
|
|
def _deploy(args):
|
|
dest = args[0]
|
|
if dest != "linode":
|
|
nixos-rebuild switch --use-remote-sudo --use-substitutes --target-host @(dest) --build-host @(dest)
|
|
else:
|
|
nixos-rebuild swtich --use-remote-sudo --use-substitutes --target-host @(dest)
|
|
aliases['deploy'] = _deploy
|
|
|
|
def _yaml2json(args, stdin=None, stdout=None):
|
|
import sys, yaml, json
|
|
from yaml import CLoader
|
|
json.dump(yaml.load(stdin, Loader=CLoader), stdout, indent=4)
|
|
aliases['yaml2json'] = _yaml2json
|
|
|
|
def _py2env(args):
|
|
vox new @(args[0]) -p /usr/bin/python2
|
|
aliases['py2env'] = _py2env
|
|
|
|
def _py3env(args):
|
|
vox new @(args[0])
|
|
aliases['py3env'] = _py3env
|
|
|
|
def _rundock(args):
|
|
if Path('/usr/bin/podman').exists():
|
|
e = 'podman'
|
|
else:
|
|
e = 'docker'
|
|
@(e) exec -ti @(args[0]) /bin/bash
|
|
aliases['rundock'] = _rundock
|
|
|
|
def _pip_extras(args):
|
|
import importlib_metadata
|
|
print(importlib_metadata.metadata(args[0]).get_all('Provides-Extra'))
|
|
aliases['pip_extras'] = _pip_extras
|
|
|
|
# Container stuff
|
|
def _newdock(args):
|
|
if Path('/usr/bin/podman').exists():
|
|
e = 'podman'
|
|
else:
|
|
e = 'docker'
|
|
@(e) run -P --privileged=true -e DISPLAY=$DISPLAY -v /tmp/.X11-unix:/tmp/.X11-unix -v @(getcwd()):/dmnt -v /etc/pki:/etc/pki:ro -d --name @(args[1]) @(args[0]) /sbin/init
|
|
rundock @(args[1])
|
|
aliases['newdock'] = _newdock
|
|
|
|
def _unknown_host(args):
|
|
sed -i -e @(args[0])d ~/.ssh/known_hosts
|
|
aliases['unknown_host'] = _unknown_host
|
|
|
|
def _bake(args):
|
|
from pathlib import Path
|
|
templates = Path("~/.copier-templates/").expanduser()
|
|
if not templates.exists():
|
|
git clone src:greg/copier-templates.git ~/.copier-templates
|
|
copier copy @(str(templates / args[0])) .
|
|
aliases['bake'] = _bake
|
|
|
|
def _cleanup(args):
|
|
sudo nix profile wipe-history --profile ~/.local/state/nix/profiles/home-manager --older-than '30d'
|
|
sudo nix-collect-garbage --delete-older-than 30d
|
|
sudo nix store optimise
|
|
aliases['cleanup'] = _cleanup
|
|
|
|
###
|
|
#
|
|
# Other random nice-to-have things
|
|
#
|
|
###
|
|
|
|
# Allows identifying JSON as if it was Python by adding some new builtins to the language
|
|
import builtins
|
|
builtins.true = True
|
|
builtins.false = False
|
|
builtins.null = None
|
|
|
|
exec($(carapace _carapace xonsh))
|