wip

zsh/.local/share/zsh/functions/export-secret

@@ -0,0 +1,15 @@
+export-secret() {
+  local name="$1"
+  local file="/run/secrets/${name}"
+
+  if [[ ! -f "$file" ]]; then
+      echo "Error: secret file not found: $file" >&2
+      return 1
+  fi
+
+  # Read first line, remove trailing spaces/tabs, convert nulls to newlines
+  local value
+  value=$(head -n1 "$file" | sed 's/[ \t]*$//' | tr '\0' '\n')
+
+  export "${name}=${value}"
+}

zsh/.zshrc

@@ -77,22 +77,23 @@ precmd_functions+=( set_prompt )
 
 # setup SSH keys
 if [ -e /usr/bin/keychain ]; then
-  eval $(/usr/bin/keychain --eval --agents ssh -Q --quiet id_ed25519)
+#  eval $(/usr/bin/keychain --eval --agents ssh -Q --quiet id_ed25519)
+  eval $(/usr/bin/keychain --eval -Q --quiet id_ed25519)
 fi
 
 # direnv setup
 whence -p direnv &>/dev/null && eval "$(direnv hook zsh)"
 
-# setup CFA environment
-if [ -e $HOME/cfa-work/.zshrc ]; then
-  . $HOME/cfa-work/.zshrc
+# secrets
+if [ -r $HOME/.env_secrets ]; then
+  export $(xargs < "$HOME/.env_secrets")
 fi
 
-for env in $HOME/.config/*/.env; do
-   if [ -r "$env" ]; then
-     export $(xargs < "$env")
-   fi
-done
+# for env in $HOME/.config/*/.env; do
+#    if [ -r "$env" ]; then
+#      export $(xargs < "$env")
+#    fi
+# done
 
 # command line completion
 autoload -U +X bashcompinit && bashcompinit