diff options
| author | EuAndreh <eu@euandre.org> | 2023-03-12 20:09:36 -0300 |
|---|---|---|
| committer | EuAndreh <eu@euandre.org> | 2023-03-12 20:09:36 -0300 |
| commit | d0d1fffee8dc94c53f4841dacf8b6bbdc99ee58a (patch) | |
| tree | b3ecc5210e9f2dc4ae82539b140a5e1694c7f04a /Makefile | |
| parent | system.scm: Use generic title for CGit root-title (diff) | |
| download | server-d0d1fffee8dc94c53f4841dacf8b6bbdc99ee58a.tar.gz server-d0d1fffee8dc94c53f4841dacf8b6bbdc99ee58a.tar.xz | |
Makefile: Add "upload-secrets" target, and include borg-passphrase.txt in it
Notes
See CI logs with:
git notes --ref=refs/notes/ci-logs show d0d1fffee8dc94c53f4841dacf8b6bbdc99ee58a
git notes --ref=refs/notes/ci-data show d0d1fffee8dc94c53f4841dacf8b6bbdc99ee58a
Exit status: 0
Duration: 19
Diffstat (limited to 'Makefile')
| -rw-r--r-- | Makefile | 22 |
1 files changed, 22 insertions, 0 deletions
@@ -12,6 +12,28 @@ clean: public: +secrets.txt.gpg = \ + src/secrets/borg-passphrase.txt.gpg +secrets.txt = $(secrets.txt.gpg:.gpg=) + + +.SUFFIXES: .gpg + +.gpg: + gpg -d < $< > $@ + +$(secrets.txt.gpg): + gpg -aer eu@euandre.org < $(@D)/`basename $@ .gpg` > $@ + +upload-secrets: $(secrets.txt) + ssh euandre.org sudo -u secrets-keeper 'rm -f /opt/secrets/*' + rsync \ + --rsync-path='sudo -u secrets-keeper rsync' \ + --chmod=000 \ + -avzP \ + $(secrets.txt) euandre.org:/opt/secrets/ + + ## Generate the ".ssh/authorized_keys" file and upload ## it to rsync.net. upload-keys: |