.POSIX:



all:


check:

clean:
	rm -rf \
		src/secrets/*.txt

public:


secrets.txt.gpg = \
	src/secrets/borg-passphrase.txt.gpg
secrets.txt = $(secrets.txt.gpg:.gpg=)


.SUFFIXES: .gpg

.gpg:
	gpg -d < $< > $@

$(secrets.txt.gpg):
	gpg -aer eu@euandre.org < $(@D)/`basename $@ .gpg` > $@

upload-secrets: $(secrets.txt)
	ssh euandre.org sudo -u secrets-keeper 'rm -f /opt/secrets/*'
	rsync \
		--rsync-path='sudo -u secrets-keeper rsync' \
		--chmod=000                                 \
		-avzP                                       \
		$(secrets.txt) euandre.org:/opt/secrets/


## Generate the ".ssh/authorized_keys" file and upload
## it to rsync.net.
upload-keys:
	cat src/infrastructure/keys/SSH/*.pub | ssh suyin dd of=.ssh/authorized_keys