1 files changed, 60 insertions, 6 deletions

diff --git a/accounts/gkleen@sif/systemd.nix b/accounts/gkleen@sif/systemd.nix
index 21c50008..bd506590 100644
--- a/accounts/gkleen@sif/systemd.nix
+++ b/accounts/gkleen@sif/systemd.nix
@@ -47,15 +47,69 @@ in {
       Service = {
         Type = "oneshot";
         WorkingDirectory = "~";
-        ExecStart = toString (pkgs.writers.writePython3 "sync-keepass" {} ''
+        ExecStart = toString (pkgs.writers.writePython3 "sync-keepass" {
+          libraries = with pkgs.python3Packages; [ dateutil ];
+        } ''
           import json
           import subprocess
-          # from datetime import datetime
+          from os.path import (expanduser, getmtime, dirname)
+          from datetime import datetime
+          from dateutil.tz import tzlocal
+          from dateutil.parser import isoparse
+          from sys import stderr
 
-          res = None
-          with subprocess.Popen(['rclone', 'lsjson', 'surtr:store.kdbx'], stdout=subprocess.PIPE) as proc:  # noqa: E501
-              res = json.load(proc.stdout)
-          print(res)
+
+          remote_fs = 'surtr'
+          remote_file = f'{remote_fs}:store.kdbx'
+          target_file = expanduser('~/store.kdbx')
+          meta_file = expanduser('~/.store.kdbx.json')
+
+          upload_time = None
+          our_last_upload_time = None
+          mod_time = None
+
+
+          def get_upload_time():
+              upload_time = None
+              with subprocess.Popen(['rclone', 'lsjson', remote_file], stdout=subprocess.PIPE) as proc:  # noqa: E501
+                  for file in json.load(proc.stdout):
+                      if file['Path'] != 'store.kdbx':
+                          continue
+                      upload_time = isoparse(file['ModTime'])
+              return upload_time
+
+
+          def do_upload():
+              print('Uploading', file=stderr)
+              subprocess.run(['rclone', 'copy', '-I', target_file, f'{remote_fs}:'], check=True)  # noqa: E501
+              upload_time = get_upload_time()
+              with open(meta_file, 'w') as file:
+                  json.dump({'our_last_upload_time': upload_time.isoformat()}, file)
+
+
+          def do_download():
+              print('Downloading', file=stderr)
+              subprocess.run(['rclone', 'copy', '-I', remote_file, dirname(target_file)], check=True)  # noqa: E501
+
+
+          upload_time = get_upload_time()
+
+          try:
+              with open(meta_file, 'r') as file:
+                  file_content = json.load(file)
+                  our_last_upload_time = isoparse(file_content['our_last_upload_time'])  # noqa: E501
+          except FileNotFoundError:
+              pass
+
+          try:
+              mod_time = datetime.fromtimestamp(getmtime(target_file)).replace(tzinfo=tzlocal())  # noqa: E501
+          except FileNotFoundError:
+              pass
+
+          if upload_time is None or (mod_time is not None and mod_time > upload_time):  # noqa: E501
+              do_upload()
+          elif upload_time is not None and (mod_time is None or upload_time > mod_time) and (our_last_upload_time is None or upload_time > our_last_upload_time):  # noqa: E501
+              do_download()
         '');
         Environment = [ "RCLONE_PASSWORD_COMMAND=\"${pkgs.coreutils}/bin/cat ${config.sops.secrets.gkleen-rclone.path}\"" "PATH=${pkgs.rclone}/bin" ];
       };