From d0d1fffee8dc94c53f4841dacf8b6bbdc99ee58a Mon Sep 17 00:00:00 2001
From: EuAndreh <eu@euandre.org>
Date: Sun, 12 Mar 2023 20:09:36 -0300
Subject: Makefile: Add "upload-secrets" target, and include
 borg-passphrase.txt in it

---
 Makefile | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

(limited to 'Makefile')

diff --git a/Makefile b/Makefile
index 53be13d..1e98bc7 100644
--- a/Makefile
+++ b/Makefile
@@ -12,6 +12,28 @@ clean:
 public:
 
 
+secrets.txt.gpg = \
+	src/secrets/borg-passphrase.txt.gpg
+secrets.txt = $(secrets.txt.gpg:.gpg=)
+
+
+.SUFFIXES: .gpg
+
+.gpg:
+	gpg -d < $< > $@
+
+$(secrets.txt.gpg):
+	gpg -aer eu@euandre.org < $(@D)/`basename $@ .gpg` > $@
+
+upload-secrets: $(secrets.txt)
+	ssh euandre.org sudo -u secrets-keeper 'rm -f /opt/secrets/*'
+	rsync \
+		--rsync-path='sudo -u secrets-keeper rsync' \
+		--chmod=000                                 \
+		-avzP                                       \
+		$(secrets.txt) euandre.org:/opt/secrets/
+
+
 ## Generate the ".ssh/authorized_keys" file and upload
 ## it to rsync.net.
 upload-keys:
-- 
cgit v1.2.3