1 files changed, 26 insertions, 0 deletions
diff --git a/refresh_keys.sh b/refresh_keys.sh
new file mode 100755
index 0000000..5beea89
--- /dev/null
+++ b/refresh_keys.sh
@@ -0,0 +1,26 @@
+#!/bin/bash
+
+set -e
+
+function main() {
+    echo "DC4323D1738F27358793D6E87BB52F7036FA7C18:6:" | gpg --import-ownertrust && gpg --update-trustdb
+
+    cd /tmp
+    rm -rf /tmp/keys || true
+    git clone https://code.liz.coffee/keys
+    cd keys
+    gpg --status-fd 1 --verify authorized_keys.sig | grep -q "VALIDSIG DC4323D1738F27358793D6E87BB52F7036FA7C18" || exit 1
+    gpg --decrypt authorized_keys.sig
+
+    sed '/emprespresso/d' ~/.ssh/authorized_keys 
+    cat authorized_keys >> ~/.ssh/authorized_keys
+    cd /tmp
+    rm -rf keys
+}
+
+function handle_error() {
+    curl -d "ERROR IN UPDATING KEYS: $(cat /etc/hostname)" ntfy.sh/emprespresso-liz-dot-coffee
+}
+
+main || handle_error
+