#!/bin/bash
set -o errexit

source "$(dirname "$0")/lib.sh"

set -o xtrace

node="$1"
mountpoint="${2:-backup-mount}"

secrets_file="$git_root/secrets/default.yaml"
repository_url="$(colmena_eval_string -E "{nodes, ...}: nodes.$node.config.custom.backup.repo")"

if [ ! -e "$mountpoint" ]; then
    mkdir "$mountpoint"
    trap "rm -r '$mountpoint'" EXIT
fi

nix run 'nixpkgs#restic' -- mount \
    --repo "$repository_url" \
    --password-command "sops --decrypt --extract '[\"backup\"][\"repositoryPassword\"]' '${secrets_file}'" \
    "$mountpoint"

sleep 1
umount --force "$mountpoint"