diff options
| author | EuAndreh <eu@euandre.org> | 2023-03-13 12:49:05 -0300 |
|---|---|---|
| committer | EuAndreh <eu@euandre.org> | 2023-03-13 12:49:05 -0300 |
| commit | a7afe43f322d1ee3f48f29eae2f544bec4204c40 (patch) | |
| tree | 0de2fcf03f4f707ecf7d3a50b174aca0dda3e3c8 /Makefile | |
| parent | src/infrastructure/config/rc.sh: Fix address to rsync.net account (diff) | |
| download | toph-a7afe43f322d1ee3f48f29eae2f544bec4204c40.tar.gz toph-a7afe43f322d1ee3f48f29eae2f544bec4204c40.tar.xz | |
Include root@euandre.org private key to the repository
Notes
See CI logs with:
git notes --ref=refs/notes/ci-logs show a7afe43f322d1ee3f48f29eae2f544bec4204c40
git notes --ref=refs/notes/ci-data show a7afe43f322d1ee3f48f29eae2f544bec4204c40
Exit status: 0
Duration: 13
Diffstat (limited to 'Makefile')
| -rw-r--r-- | Makefile | 17 |
1 files changed, 12 insertions, 5 deletions
@@ -14,9 +14,15 @@ clean: public: -secrets.txt.gpg = \ +prod-secrets.txt.gpg = \ src/secrets/borg-passphrase.txt.gpg -secrets.txt = $(secrets.txt.gpg:.gpg=) +prod-secrets.txt = $(prod-secrets.txt.gpg:.gpg=) + +repo-secrets = \ + $(prod-secrets.txt.gpg) \ + src/secrets/root.id_rsa.txt.gpg \ + + .SUFFIXES: .gpg @@ -24,16 +30,17 @@ secrets.txt = $(secrets.txt.gpg:.gpg=) .gpg: gpg -d < $< > $@ -$(secrets.txt.gpg): +$(repo-secrets): gpg -aer eu@euandre.org < $(@D)/`basename $@ .gpg` > $@ -upload-secrets: $(secrets.txt) + +upload-secrets: $(prod-secrets.txt) ssh euandre.org sudo -u secrets-keeper 'rm -f /opt/secrets/*' rsync \ --rsync-path='sudo -u secrets-keeper rsync' \ --chmod=000 \ -avzP \ - $(secrets.txt) euandre.org:/opt/secrets/ + $(prod-secrets.txt) euandre.org:/opt/secrets/ ## Generate the ".ssh/authorized_keys" file and upload |