#!/usr/bin/env nix-shell
#! nix-shell -i bash -p openssl git openssh
set -euo pipefail

# Note: This script is executed from git root

export TMP_PLAIN=$(mktemp)
function finish {
    rm -rf $TMP_PLAIN
}
trap finish EXIT

openssl aes-256-cbc -d -salt -pbkdf2 -in ./.ci/exwm-overlay-key.enc -k $SSH_KEY_PASSPHRASE -out $TMP_PLAIN
ssh-agent bash -c "ssh-add $TMP_PLAIN && git push origin HEAD:master"