From 2144d31a0455ba32a7a0b655afdef33632a8724d Mon Sep 17 00:00:00 2001
From: Karan Jayachandra <mail@karanjayachandra.com>
Date: Fri, 31 Jul 2026 21:12:16 +0200
Subject: Hardened the server by blocking port 53 and added a deploy script

---
 deploy.sh | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100755 deploy.sh

(limited to 'deploy.sh')

diff --git a/deploy.sh b/deploy.sh
new file mode 100755
index 0000000..c5ae6b6
--- /dev/null
+++ b/deploy.sh
@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+set -euo pipefail
+cd "$(dirname "${BASH_SOURCE[0]}")"
+
+if [ ! -f .env ]; then
+  echo "Missing .env - copy .env.example to .env and set SERVER_IP (the server's Tailscale IP)." >&2
+  exit 1
+fi
+
+set -a
+source .env
+set +a
+
+: "${SERVER_IP:?SERVER_IP must be set in .env}"
+
+nixos-rebuild switch --flake .#eurovm \
+  --target-host "admin@${SERVER_IP}" \
+  --build-host  "admin@${SERVER_IP}" \
+  --elevate=sudo
-- 
cgit v1.3.1