summaryrefslogtreecommitdiffhomepage
path: root/bin/prod_secrets
blob: 68cc6d9ca7833945068c93e9bc9317d4ae41038f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
#!/usr/bin/env bash
set -euo pipefail

# Force GPG to use terminal-based pinentry (required for SSH sessions)
export GPG_TTY=$(tty)

echo "Checking production secrets for Dispatch..." >&2
echo "" >&2

# --- OpenCode Go API Key (shared across environments) ---

if gopass show -o projects/ai-api/opencode_go_key &>/dev/null; then
  echo "[ok] OpenCode Go API key exists" >&2
else
  echo "OpenCode Go API key not found in gopass." >&2
  echo "" >&2
  echo "  1. Go to https://opencode.ai/auth" >&2
  echo "  2. Sign in and copy your API key" >&2
  echo "  3. Paste it below" >&2
  echo "" >&2
  read -rp "Enter your OpenCode Go API key: " OPENCODE_KEY
  echo "$OPENCODE_KEY" | gopass insert -f projects/ai-api/opencode_go_key
  echo "[ok] OpenCode Go API key stored" >&2
fi

echo "" >&2
echo "All production secrets are configured. Outputting .env:" >&2
echo "" >&2

# --- Output .env format to stdout ---

echo "OPENCODE_API_KEY=$(gopass show -o projects/ai-api/opencode_go_key)"
echo "DISPATCH_MODEL=deepseek-v4-flash-free"