cmc/cleberg.net

My personal web garden & blog.

clone: git clone https://gitbay.org/cmc/cleberg.net.git

dff89cd5ed4d77f90e71c4ab536f2462c8e86ef8

verified · cmc

author: Christian Cleberg <hello@cleberg.net> · 2026-03-23T16:35:26Z

chore: enforce secure permissions on ssh config in build

 .build.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.build.yml b/.build.yml
index d37ef8b..6359408 100644
--- a/.build.yml
+++ b/.build.yml
@@ -36,9 +36,10 @@ tasks:
       cd cleberg.net
       uv run python3 -u build.py
   - deploy: |
+      set -euo pipefail
       cd cleberg.net
       chmod 600 ~/.ssh/id_rsa
+      chmod 600 ~/.ssh/config
       rsync -r --delete-before \
-        -e "ssh -o StrictHostKeyChecking=no" \
         .build/ \
         homelab:/var/www/cleberg.net/