host := `hostname`
key_services := "github gradescope"

rebuild:
    sudo nixos-rebuild switch --flake .#{{host}}

update:
    sudo nix flake update

gc:
    sudo nix-env --delete-generations +3
    sudo nix-store --gc

# Generate high-strength, post-quantum ready SSH keys without passphrases
gen-keys:
    #!/usr/bin/env bash
    set -euo pipefail
    mkdir -p ~/.ssh
    
    for service in {{key_services}}; do
        FILE="$HOME/.ssh/id_$service"
        
        if [ -f "$FILE" ]; then
            echo "skipping: $FILE already exists."
        else
            echo "generating: $FILE"
            ssh-keygen -t ed25519 -a 100 -o -f "$FILE" -N ""
        fi
    done