#!/bin/bash

set -e

host=${HOST:-$HOSTNAME}
test -n "$host"

dev=$1
dev_basename=${dev##*/}
outfile="$HOME/$host-${dev_basename}-luks-header.bak"

test -n "$dev_basename"

cryptsetup --header-backup-file="$outfile" luksHeaderBackup $dev
gpg --batch -r 0x6D1655C14CE1C13E -e "$outfile"
rm "$outfile"
chown flo:users "$outfile.gpg"