aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Cleberg <[email protected]>2026-03-23 11:35:26 -0500
committerChristian Cleberg <[email protected]>2026-03-23 11:35:26 -0500
commitdff89cd5ed4d77f90e71c4ab536f2462c8e86ef8 (patch)
tree28858b08d3bf122888af042570cfdc6d451b84f2
parente57fec4f6cc08e4a88af259c31654c96c3a02172 (diff)
downloadcleberg.net-dff89cd5ed4d77f90e71c4ab536f2462c8e86ef8.tar.gz
cleberg.net-dff89cd5ed4d77f90e71c4ab536f2462c8e86ef8.tar.bz2
cleberg.net-dff89cd5ed4d77f90e71c4ab536f2462c8e86ef8.zip
chore: enforce secure permissions on ssh config in build
-rw-r--r--.build.yml3
1 files changed, 2 insertions, 1 deletions
diff --git a/.build.yml b/.build.yml
index d37ef8b..6359408 100644
--- a/.build.yml
+++ b/.build.yml
@@ -36,9 +36,10 @@ tasks:
cd cleberg.net
uv run python3 -u build.py
- deploy: |
+ set -euo pipefail
cd cleberg.net
chmod 600 ~/.ssh/id_rsa
+ chmod 600 ~/.ssh/config
rsync -r --delete-before \
- -e "ssh -o StrictHostKeyChecking=no" \
.build/ \
homelab:/var/www/cleberg.net/