Node-ng 10.5.0, Cli-ng 10.11.0.0, ssh over ssm

.envrc

@@ -1,32 +1,34 @@
+# shellcheck disable=SC2148
 if ! has nix_direnv_version || ! nix_direnv_version 3.0.6; then
   source_url "https://raw.githubusercontent.com/nix-community/nix-direnv/3.0.6/direnvrc" "sha256-RYcUJaRMf8oF5LznDrlCXbkOQrywm0HDv1VjYGaJGdM="
 fi
 
 IGREEN='\033[0;92m'
 IRED='\033[0;91m'
 NC='\033[0m'
-if [ $(nix eval --impure --expr 'let f = builtins.getFlake "git+file://${toString ./.}"; in f.lib.versionAtLeast builtins.nixVersion "2.17.0"') != "true" ]; then
+if [ "$(nix eval --impure --expr "let f = builtins.getFlake \"git+file://\${toString ./.}\"; in f.lib.versionAtLeast builtins.nixVersion \"2.17.0\"")" != "true" ]; then
   echo -e "The nix version must be at least ${IGREEN}2.17.0${NC} for fetchClosure of pure packages."
   echo -e "Your version is ${IRED}$(nix --version)${NC}"
   exit
 fi
 
-if [ $(nix eval --expr 'builtins ? fetchClosure') != "true" ]; then
+if [ "$(nix eval --expr 'builtins ? fetchClosure')" != "true" ]; then
   echo -e "Experimental nix feature \"${IGREEN}fetch-closure${NC}\" ${IRED}must be enabled${NC} for fetchClosure of pure packages."
   echo "You may need to add the following to your nix config:"
   echo
   echo "nix.settings.extraOptions = \"experimental-features = fetch-closure\";"
   exit
 fi
 
+# shellcheck disable=SC1091
 [ -f .envrc.local ] && source .envrc.local
 
 if [ -z "${SOPS_AGE_KEY_FILE:-}" ] && [ -f ~/.age/credentials ]; then
   export SOPS_AGE_KEY_FILE=~/.age/credentials
 fi
 
 if [ -n "${DEVSHELL_TARGET:-}" ]; then
-  use flake .#${DEVSHELL_TARGET}
+  use flake ".#$DEVSHELL_TARGET"
 else
   use flake
 fi