chore: harden key generation script
3a4707dcbd450c0b73a687f0f136beebf3ed6673
Oliver Jan Krylow <oliver@bugabinga.net> · 2026-08-29 02:36 UTC
unverifiable SSH 1 parent
repositories / bugabinga.net
bugabinga.net
personal infrastructure for bugabinga!
owned by admin
Changed files (1)
create_keys.sh
ready@@ -1,3 +1,6 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
# Generate key pair (no passphrase)
ssh-keygen -t ed25519 -f ssh_host_ed25519_key -N "" -C "root@bugabinga-relay"
# View the values to copy into secrets.auto.tfvars
@@ -6,9 +9,9 @@
echo -e "\nssh_host_key_ed25519_public:"
cat ssh_host_ed25519_key.pub
# Generate VPS (Server) Keys
-wg genkey | tee wg_server_private.key | wg pubkey > wg_server_public.key
+wg genkey | tee wg_server_private.key | wg pubkey >wg_server_public.key
# Generate Home Server (Peer) Keys (if you don't have them yet)
-wg genkey | tee wg_peer_private.key | wg pubkey > wg_peer_public.key
+wg genkey | tee wg_peer_private.key | wg pubkey >wg_peer_public.key
# View the values
echo "VPS Private Key (for wg_server_private_key):"
cat wg_server_private.key