#!/bin/sh
if ! grep -qE "vault_decrypted: true" "./vars/bootstrap.yaml";
then
    echo "Decrypt vaults using './decrypt-vault.sh' first!"
    exit 1
fi

if ! grep -qE "vault_decrypted: true" "./vars/vault.yaml";
then
    echo "Decrypt vaults using './decrypt-vault.sh' first!"
    exit 1
fi

./helpers/get-passwords.sh

ansible-playbook main.yaml --become-method sudo --extra-vars "ansible_become_pass=$(cat .passwords/bootstrap_become)"

./helpers/delete-passwords.sh