conf.elv

# Copyright (c) 2014-2016, 2020, Cody Opel <cwopel@chlorm.net>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


use github.com/chlorm/elvish-stl/io
use github.com/chlorm/elvish-stl/os
use github.com/chlorm/elvish-stl/path
use github.com/chlorm/elvish-stl/re
use github.com/chlorm/elvish-stl/str


var DIR = (path:join (path:home) '.ssh')

# Make sure all directories and files have the correct permissions
# to ensure everything works with StrictModes enabled.
# FIXME: windows support (chmod)
fn set-permissions {
    os:chmod 700 (path:home)
    os:chmod 700 $DIR

    for i (path:scandir $DIR)['files'] {
        set i = (path:join $DIR $i)
        if (re:match 'PRIVATE KEY-----' [ (str:to-lines (io:read $i)) ][0]) {
            # Private keys should never be readable by other users
            os:chmod 600 $i
            continue
        }
        if (==s 'config' (path:basename $i)) {
            os:chmod 600 $i
            continue
        }

        # All files other than private keys need to be readable by sshd
        os:chmod 644 $i
    }
}

# Accepts a list of paths to public keys to populate authorized_keys with.
fn populate-authorized-keys {|@pubKeyFiles|
    # Populates the authorized_keys file
    var authKeysFile = (path:join $DIR 'authorized_keys')
    if (os:exists $authKeysFile) {
        os:remove $authKeysFile
    }
    os:touch $authKeysFile
    # FIXME: windows support
    os:chmod 644 $authKeysFile
    for pubKey $pubKeyFiles {
        echo $pubKey >> $authKeysFile
    }
}