#!/usr/bin/env bash

set -euo pipefail

if [ $# -lt 2 ]; then echo “Usage: decrypt.sh ” exit 1 fi

filename=”$1” password=”$2”

tail -n +2 “$filename”
| base64 –decode
| openssl enc -d -aes-256-cbc -pbkdf2 -salt -in - -out - -k “$password”