dotfiles-encrypt

#!/bin/sh
set -e

PASSWDFILE=~/.dotfiles/.passwd

if ! [ -f $PASSWDFILE ]; then
  printf "Missing password file $PASSWDFILE.\nPassword: "
  read passwd
  tempfile=$(mktemp --tmpdir dotfiles-encrypt.XXX)
  trap 'rm -f "$tempfile" >/dev/null 2>&1' 0
  trap 'exit 2' 1 2 3 15
  echo $passwd > $tempfile
  PASSWDFILE="$tempfile"
fi

basename=$(basename $0)

if [ "$basename" = "dotfiles-decrypt-verify" ]; then
  # Test if decryption works properly.
  dotfiles-decrypt "U2FsdGVkX1+T+vo4rP6Ah5NQz/DJjBhsIYiHKb6S2+k="
  exit
fi

md=sha256
if [ "$1" = '-md' ]; then
  md="$2"
  shift 2
fi

if [ x$# = x0 ]; then
  input=
  if [ -t 0 ]; then
    printf "Input: "
    read input
  fi
else
  input="$@"
fi

cmd="openssl enc -md $md -aes-256-cbc -pbkdf2 -a -A -salt -pass file:$PASSWDFILE"
case $basename in
  dotfiles-encrypt)
    ;;
  dotfiles-decrypt)
    cmd="$cmd -d"
    ;;
  *) echo "Unhandled basename: $basename." >&2; exit 64
    ;;
esac

if [ -n "$input" ]; then
  echo "$input" | $cmd
else
  $cmd
fi