From c6e6c5831378804b8f681d4592e4e46f66f8f1f8 Mon Sep 17 00:00:00 2001
From: Andrew Rioux <rioux.d.andrew@gmail.com>
Date: Sun, 19 Oct 2025 23:53:17 -0400
Subject: [PATCH] fix: fix permissions on private key

---
 .gitea/workflows/deploy.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 20e1af0..efb7f08 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -18,7 +18,7 @@ jobs:
           cat - <<EOD > ssh-key
           ${{ secrets.DEPLOY_SSH_KEY }}
           EOD
-
+          chmod 400 ssh-key
           export NIX_PATH=nixpkgs=flake:nixpkgs:/nix/var/nix/profiles/per-user/root/channels/nixos
           /run/current-system/sw/bin/nix-shell -p rsync openssh --run \
             'rsync -avz -e "ssh -oStrictHostKeyChecking=accept-new -i ssh-key" result/* deploy@andrew.riouxs.co:/srv/site'