Add zip keys

.drone.yml

@@ -11,8 +11,11 @@ steps:
         from_secret: serverctl_access_key
       SECRET_KEY:
         from_secret: serverctl_secret_key
+      SSH_ZIP_KEY:
+        from_secret: serverctl_ssh_zip_key
     commands:
-      - apk --update add curl
+      - apk --update add curl zip
+      - cd infrastructure && unzip-ssh-keys "$SSH_ZIP_KEY" && cd ..
       - curl --silent --output terraform.zip "https://releases.hashicorp.com/terraform/1.1.6/terraform_1.1.6_linux_amd64.zip"
       - unzip terraform.zip ; rm -f terraform.zip; chmod +x terraform
       - mkdir -p ${HOME}/bin ; export PATH=${PATH}:${HOME}/bin; mv terraform ${HOME}/bin/
@@ -20,4 +23,4 @@ steps:
       - cd infrastructure/create-resources
       - terraform init -backend-config="access_key=$ACCESS_KEY" -backend-config="secret_key=$SECRET_KEY"
       - terraform validate
-      - terraform apply -auto-approve -var "hcloud_token=$HCLOUD_TOKEN"
+      - terraform apply -auto-approve -var "hcloud_token=$HCLOUD_TOKEN" -var "pvt_key='../ssh_keys/id_ed25519'" -var "pub_key='../ssh_keys/id_ed25519.pub'"

infrastructure/.gitignore

@@ -0,0 +1 @@
+ssh_keys/

infrastructure/unzip-ssh-keys.sh

@@ -0,0 +1,7 @@
+#!/bin/sh
+
+ZIP_KEY=$1
+
+unzip -P "$ZIP_KEY" ssh_keys.zip
+
+echo "unzip done!"

infrastructure/zip-ssh-keys.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+
+ZIP_KEY=$(openssl rand -hex 30)
+
+mkdir -p ssh_keys/
+
+cp -f ~/.ssh/id_ed25519* ssh_keys/
+
+zip -r --password $ZIP_KEY ssh_keys.zip ssh_keys/
+
+echo "zip done!"
+echo "Zip key: $ZIP_KEY"