#!/usr/bin/env zsh

keyFile=../dns/keys/${2:t}_acme.yaml
gup -u $keyFile
sops -d --input-type=binary --output-type=binary ${keyFile} | yq -r '.key[0].secret' > $1
sops -p '7ED22F4AA7BB55728B643DC5471B7D88E4EF66F8,30D3453B8CD02FE2A3E7C78C0FB536FB87AE8F51' --input-type=binary -e -i $1