#!/usr/bin/env bash

# fail on errors
set -euo pipefail

# operate from root of repository
SCRIPT_DIR="$(dirname "$0")"
ROOT_DIR="$(realpath "$SCRIPT_DIR/..")"
pushd "$ROOT_DIR" > /dev/null

# allow globstar
shopt -s globstar

# rekeying
rekey_dir() {
  find $1 -type f | xargs -i sops updatekeys -y {}
}

rekey_dir "secrets/*"