blob: 4b3a1c6921385d8995788525dd63ffa551ab7b1a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
#!/bin/bash
# Module: vault-remote
# Description: Sincroniza secretos cifrados entre vault local y remoto
# License: GPLv3
# Author: Luis GuLo
# Version: 1.1.0
# Dependencies: ssh, scp, gpg
VAULT_DIR="core/vault"
vault_remote_task() {
local host="$1"; shift
declare -A args
for arg in "$@"; do
key="${arg%%=*}"
value="${arg#*=}"
args["$key"]="$value"
done
local action="${args[action]}"
local key="${args[key]}"
local remote_path="${args[remote_path]:-/tmp/shflow_vault}"
local become="${args[become]}"
local prefix=""
[ "$become" = "true" ] && prefix="sudo"
# Cargar traducciones
local lang="${shflow_vars[language]:-es}"
local trfile="$(dirname "${BASH_SOURCE[0]}")/vault-remote.tr.${lang}"
declare -A tr
if [[ -f "$trfile" ]]; then
while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"
fi
case "$action" in
push)
if [ ! -f "$VAULT_DIR/$key.gpg" ]; then
echo "$(render_msg "${tr[missing_local]}" "key=$key")"
return 1
fi
scp "$VAULT_DIR/$key.gpg" "$host:$remote_path/$key.gpg"
ssh "$host" "$prefix mkdir -p '$remote_path'"
echo "$(render_msg "${tr[pushed]}" "key=$key" "host=$host" "path=$remote_path")"
;;
pull)
ssh "$host" "$prefix test -f '$remote_path/$key.gpg'" || {
echo "$(render_msg "${tr[missing_remote]}" "key=$key")"
return 1
}
scp "$host:$remote_path/$key.gpg" "$VAULT_DIR/$key.gpg"
echo "$(render_msg "${tr[pulled]}" "key=$key" "host=$host")"
;;
sync)
ssh "$host" "$prefix mkdir -p '$remote_path'"
scp "$VAULT_DIR/"*.gpg "$host:$remote_path/"
echo "$(render_msg "${tr[synced]}" "host=$host" "path=$remote_path")"
;;
*)
echo "$(render_msg "${tr[unsupported]}" "action=$action")"
return 1
;;
esac
}
check_dependencies_vault_remote() {
local lang="${shflow_vars[language]:-es}"
local trfile="$(dirname "${BASH_SOURCE[0]}")/vault-remote.tr.${lang}"
declare -A tr
if [[ -f "$trfile" ]]; then
while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"
fi
for cmd in ssh scp gpg; do
if ! command -v "$cmd" &> /dev/null; then
echo "$(render_msg "${tr[missing_deps]}" "cmd=$cmd")"
return 1
fi
done
echo "${tr[deps_ok]:-✅ [vault-remote] Dependencias disponibles.}"
return 0
}
|
