300766c892
deploy/ builds what mf.toml builds; the secrets MF had are in fnox.toml (Elias + the HEAD VPS key); db apply once per deployment, then the server behind Caddy.
7 lines
284 B
Shell
Executable file
7 lines
284 B
Shell
Executable file
#!/bin/sh
|
|
# Decrypts fnox.toml's secrets with the host's age key (mounted at /run/secrets/age_key) into the
|
|
# environment of the command only: never written to disk, never a Docker env var.
|
|
set -eu
|
|
FNOX_AGE_KEY="$(cat /run/secrets/age_key)"
|
|
export FNOX_AGE_KEY
|
|
exec fnox exec -- "$@"
|