From 2ea0cb56ed538f5c46f0a19df201b33e732da1b9 Mon Sep 17 00:00:00 2001 From: Matthew McKinnon Date: Mon, 28 Oct 2024 21:58:57 +1000 Subject: [PATCH] fix: Deployment SSH keys --- .gitea/workflows/deploy-containers.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/deploy-containers.yml b/.gitea/workflows/deploy-containers.yml index e94d81e..0cd5b27 100644 --- a/.gitea/workflows/deploy-containers.yml +++ b/.gitea/workflows/deploy-containers.yml @@ -28,14 +28,14 @@ jobs: run: | mkdir -p ~/.ssh echo "${{ secrets.SSH_KNOWN_HOSTS }}" >> ~/.ssh/known_hosts - chmod 644 ~/.ssh/known_hosts + chmod 600 ~/.ssh/known_hosts eval $(ssh-agent -s) ssh-add <(echo "${{ secrets.SSH_PRIVATE_KEY }}") echo "HOST *" > ~/.ssh/config echo "StrictHostKeyChecking no" >> ~/.ssh/config echo "${{ secrets.ANSIBLE_VAULT_PASSWORD }}" > ~/.vault_password.txt echo "nameserver 10.10.10.1" > /etc/resolv.conf - ssh-add -L + cat ~/.ssh/known_hosts # ./.gitea/workflows/deploy.sh "${{ github.event.before }}" "${{ github.sha }}" \ No newline at end of file