From dff89cd5ed4d77f90e71c4ab536f2462c8e86ef8 Mon Sep 17 00:00:00 2001
From: Christian Cleberg <hello@cleberg.net>
Date: Mon, 23 Mar 2026 11:35:26 -0500
Subject: chore: enforce secure permissions on ssh config in build

---
 .build.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.build.yml b/.build.yml
index d37ef8b..6359408 100644
--- a/.build.yml
+++ b/.build.yml
@@ -36,9 +36,10 @@ tasks:
       cd cleberg.net
       uv run python3 -u build.py
   - deploy: |
+      set -euo pipefail
       cd cleberg.net
       chmod 600 ~/.ssh/id_rsa
+      chmod 600 ~/.ssh/config
       rsync -r --delete-before \
-        -e "ssh -o StrictHostKeyChecking=no" \
         .build/ \
         homelab:/var/www/cleberg.net/
-- 
cgit v1.2.3