Merge branch 'caddy' of https://gut.oily.dad/finn/site into caddy

ls_rclone.sh

@@ -0,0 +1,5 @@
+rclone ls :sftp: \
+  --sftp-host=localhost \
+  --sftp-port=11111 \
+  --sftp-user=armbian \
+  --sftp-key-file=/home/armbian/.ssh/armbian-brie-202604

sshtun/Dockerfile

@@ -1,16 +1,20 @@
-FROM debian:12-slim
+FROM debian:13-slim
 
-RUN apt update && apt install -y openssh-server socat
+RUN apt update
+RUN apt install -y \
+	openssh-server \
+	socat
 
-RUN adduser --disabled-password --gecos "" finn
+RUN adduser --disabled-password --gecos "" armbian
 
-RUN mkdir /home/finn/.ssh
-
-# only one pubkey -- wildcard to conceal filename
-COPY ./oilykey/*.pub /home/finn/.ssh/authorized_keys
-COPY ./oilykey/* /home/finn/.ssh/
-
-RUN mkdir /var/run/sshd
+# ssh:
+RUN mkdir /home/armbian/.ssh
+# only one pubkey -- wildcard just to conceal filename
+COPY ./oilykey/*.pub /home/armbian/.ssh/authorized_keys
+COPY ./oilykey/* /home/armbian/.ssh/
+RUN chown -R armbian:armbian /home/armbian/.ssh/
+RUN chmod 600 /home/armbian/.ssh/*
+#RUN mkdir /var/run/sshd
 RUN echo "PermitRootLogin no" >> /etc/ssh/sshd_config
 RUN echo "PasswordAuthentication no" >> /etc/ssh/sshd_config
 

sshtun/manual_rclone.sh

@@ -0,0 +1,8 @@
+rclone mount :sftp: /armbian/briemount \
+  --sftp-host=localhost \
+  --sftp-port=11111 \
+  --sftp-user=armbian \
+  --sftp-key-file=/home/armbian/.ssh/armbian-brie-202604 \
+  --vfs-cache-mode off \
+  --allow-other \
+  --daemon