diff options
| author | EuAndreh <eu@euandre.org> | 2023-03-13 13:00:38 -0300 |
|---|---|---|
| committer | EuAndreh <eu@euandre.org> | 2023-03-13 13:02:14 -0300 |
| commit | 7841878f9ce2249cbf2368ca07f21cd1d3cbb8b4 (patch) | |
| tree | 1a1a31997cd2bb85ac6ddc3468eba82f04a53df3 /Makefile | |
| parent | Include root@euandre.org private key to the repository (diff) | |
| download | server-7841878f9ce2249cbf2368ca07f21cd1d3cbb8b4.tar.gz server-7841878f9ce2249cbf2368ca07f21cd1d3cbb8b4.tar.xz | |
Make server get SSH keypair from repo over local files in server disk
Diffstat (limited to 'Makefile')
| -rw-r--r-- | Makefile | 11 |
1 files changed, 6 insertions, 5 deletions
@@ -15,12 +15,12 @@ public: prod-secrets.txt.gpg = \ - src/secrets/borg-passphrase.txt.gpg + src/secrets/borg-passphrase.txt.gpg \ + src/secrets/root@euandre.org.id_rsa.txt.gpg prod-secrets.txt = $(prod-secrets.txt.gpg:.gpg=) repo-secrets = \ $(prod-secrets.txt.gpg) \ - src/secrets/root.id_rsa.txt.gpg \ @@ -34,16 +34,17 @@ $(repo-secrets): gpg -aer eu@euandre.org < $(@D)/`basename $@ .gpg` > $@ -upload-secrets: $(prod-secrets.txt) +public-ssh = src/infrastructure/keys/SSH/root@euandre.org.id_rsa.pub.txt +upload-secrets: $(prod-secrets.txt) $(public-ssh) ssh euandre.org sudo -u secrets-keeper 'rm -f /opt/secrets/*' rsync \ --rsync-path='sudo -u secrets-keeper rsync' \ --chmod=000 \ -avzP \ - $(prod-secrets.txt) euandre.org:/opt/secrets/ + $(prod-secrets.txt) $(public-ssh) euandre.org:/opt/secrets/ ## Generate the ".ssh/authorized_keys" file and upload ## it to rsync.net. upload-keys: - cat src/infrastructure/keys/SSH/*.pub | ssh suyin dd of=.ssh/authorized_keys + cat src/infrastructure/keys/SSH/*.txt | ssh suyin dd of=.ssh/authorized_keys |