Roadmap: Password Consolidation to gopass v3

# 1. In 1Password desktop app:
# Settings > Export > Select vault > 1PUX format
# Save as: ~/1password-export-$(date +%Y%m%d).1pux

# 2. Convert to CSV for processing
# (1PUX is JSON-based, can be parsed directly)
unzip ~/1password-export-*.1pux -d /tmp/1password-data/

#!/bin/bash
# convert-1password.sh - Process 1Password export

INPUT_DIR="/tmp/1password-data"
OUTPUT_DIR="/tmp/gopass-import"

mkdir -p "$OUTPUT_DIR"

# Parse export.data (JSON) and generate gopass-compatible files
# Each login becomes: password + YAML metadata

jq -r '.accounts[].vaults[].items[] | select(.categoryUUID == "001") |
  {title: .overview.title,
   url: .overview.url,
   username: (.details.loginFields[] | select(.designation == "username") | .value),
   password: (.details.loginFields[] | select(.designation == "password") | .value)}' \
  "$INPUT_DIR/export.data" | while read -r item; do
    # Generate gopass entry
    TITLE=$(echo "$item" | jq -r '.title' | tr ' ' '-' | tr '[:upper:]' '[:lower:]')
    echo "Processing: $TITLE"
done

# For each converted entry:
gopass insert v3/personal/category/service-name << 'EOF'
password-here
---
url: https://example.com
username: user@example.com
imported_from: 1password
imported_date: 2026-02-17
EOF

# List all entries
gopass ls ADMINISTRATIO

# For each entry, read and re-insert with YAML
gopass show ADMINISTRATIO/network/9800-wlc-01 | head -1 > /tmp/pw.txt

gopass insert v3/domains/d000/network/devices/9800-wlc-01 << EOF
$(cat /tmp/pw.txt)
---
hostname: 9800-wlc-01.inside.domusdigitalis.dev
type: wireless-controller
vendor: cisco
model: Catalyst 9800-L
management_ip: 10.50.1.15
imported_from: ADMINISTRATIO
imported_date: $(date +%Y-%m-%d)
EOF

shred -u /tmp/pw.txt

# Map ARCANA categories to v3/personal/
# ARCANA/finance/* → v3/personal/finance/
# ARCANA/email/* → v3/personal/email/
# etc.

gopass show ARCANA/finance/bank-account | head -1 > /tmp/pw.txt

gopass insert v3/personal/finance/bank-name << EOF
$(cat /tmp/pw.txt)
---
url: https://bank.com
username: myuser
account_type: checking
imported_from: ARCANA
imported_date: $(date +%Y-%m-%d)
EOF

shred -u /tmp/pw.txt

# Count entries in each store
echo "=== ENTRY COUNTS ==="
echo "pass (legacy):     $(pass ls | grep -c '──')"
echo "ADMINISTRATIO:     $(gopass ls ADMINISTRATIO | grep -c '──')"
echo "ARCANA:            $(gopass ls ARCANA | grep -c '──')"
echo "v3:                $(gopass ls v3 | grep -c '──')"

# Verify critical entries work
gopass show v3/domains/d000/identity/administrator
gopass show v3/domains/d000/network/devices/9800-wlc-01
gopass show v3/personal/finance/primary-bank

# After full verification, remove legacy mounts
# WARNING: Only after confirming ALL entries migrated!

# Option 1: Unmount (keeps data, removes from gopass)
gopass mounts rm ADMINISTRATIO
gopass mounts rm ARCANA

# Option 2: Full delete (destructive)
# rm -rf ~/.local/share/gopass/stores/ADMINISTRATIO
# rm -rf ~/.local/share/gopass/stores/ARCANA

# CRITICAL: Shred the plaintext export
shred -vzn 3 ~/1password-export-*.1pux
rm -rf /tmp/1password-data/
rm -rf /tmp/gopass-import/

cd ~/.local/share/gopass/stores/v3

# Add multiple remotes for redundancy
git remote add github git@github.com:EvanusModestus/gopass-v3.git
git remote add gitlab git@gitlab.com:EvanusModestus/gopass-v3.git
git remote add gitea git@gitea.inside.domusdigitalis.dev:evanusmodestus/gopass-v3.git

# Push to all
git push github main
git push gitlab main
git push gitea main

#!/bin/bash
# gopass-sync-all.sh

cd ~/.local/share/gopass/stores/v3

for remote in github gitlab gitea; do
    echo "Syncing to $remote..."
    git push $remote main 2>/dev/null && echo "  ✓ $remote" || echo "  ✗ $remote (failed)"
done