1 files changed, 22 insertions, 0 deletions
diff --git a/Makefile b/Makefile
index 53be13d..1e98bc7 100644
--- a/Makefile
+++ b/Makefile
@@ -12,6 +12,28 @@ clean:
 public:
 
 
+secrets.txt.gpg = \
+	src/secrets/borg-passphrase.txt.gpg
+secrets.txt = $(secrets.txt.gpg:.gpg=)
+
+
+.SUFFIXES: .gpg
+
+.gpg:
+	gpg -d < $< > $@
+
+$(secrets.txt.gpg):
+	gpg -aer eu@euandre.org < $(@D)/`basename $@ .gpg` > $@
+
+upload-secrets: $(secrets.txt)
+	ssh euandre.org sudo -u secrets-keeper 'rm -f /opt/secrets/*'
+	rsync \
+		--rsync-path='sudo -u secrets-keeper rsync' \
+		--chmod=000                                 \
+		-avzP                                       \
+		$(secrets.txt) euandre.org:/opt/secrets/
+
+
 ## Generate the ".ssh/authorized_keys" file and upload
 ## it to rsync.net.
 upload-keys: