dont leave secrets* world wide readable

This commit is contained in:
Andreas Neue 2023-06-05 09:36:36 +02:00
parent 5d2808c301
commit 4a05d9f562
1 changed files with 1 additions and 0 deletions

View File

@ -93,6 +93,7 @@ ifdef DEPLOY_HOSTS
@- $(foreach host,$(DEPLOY_HOSTS), \
ssh $(SSH_USER)@$(host) "mkdir -p $(DEPLOY_PATH)/$(DEPLOY_NAME)"; \
rsync -rav --exclude '*~' --exclude '.git*' --exclude '*.swp' . $(SSH_USER)@$(host):$(DEPLOY_PATH)/$(DEPLOY_NAME); \
ssh $(SSH_USER)@$(host) "cd $(DEPLOY_PATH)/$(DEPLOY_NAME) && chmod o-r .env secrets*" \
)
endif