From b3d69e6dac3d56a0ab0fd7ec763faeef30599b61 Mon Sep 17 00:00:00 2001
From: Andrew Stowell <andrew@digitaladapt.com>
Date: Sun, 21 Sep 2025 20:10:32 -0400
Subject: [PATCH] new script to sync ssh keys from a Gitea instance.

---
 sync-keys.sh | 51 +++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 51 insertions(+)
 create mode 100755 sync-keys.sh

diff --git a/sync-keys.sh b/sync-keys.sh
new file mode 100755
index 0000000..c32d86d
--- /dev/null
+++ b/sync-keys.sh
@@ -0,0 +1,51 @@
+#!/usr/bin/env bash
+
+# syncronize authorized_keys with a Gitea instance,
+# enabling all your ssh keys in your Gitea instance
+# to allow connecting to your machine.
+
+# load in defaults from config
+scriptRoot=$(dirname "$0")
+configFile="$scriptRoot/config.sh"
+if [[ -f "$configFile" ]]; then
+    source "$configFile"
+else
+    echo "${0} requires config file to exist"
+    exit 1
+fi
+
+if [[ -z "${GITEA_TOKEN}" ]] || [[ -z "${GITEA_DOMAIN}" ]]; then
+    echo "${0} requires config file to contain GITEA_DOMAIN and GITEA_TOKEN"
+    exit 2
+fi
+
+# if there is a filter string, use it
+jq_select=""
+if [[ -n "${GITEA_FILTER}" ]]; then
+    jq_select=" | select(. | contains(\"${GITEA_FILTER}\"))"
+fi
+
+# fetch current keys into new file
+curl --silent -X 'GET' \
+  "https://${GITEA_DOMAIN}/api/v1/user/keys?token=${GITEA_TOKEN}" \
+  -H 'accept: application/json' | \
+  jq -r ".[].key${jq_select}" > "${HOME}/.ssh/authorized_keys.new"
+
+# get filesizes
+oldSize=$(wc -l "${HOME}/.ssh/authorized_keys"     | cut -d ' ' -f 1)
+newSize=$(wc -l "${HOME}/.ssh/authorized_keys.new" | cut -d ' ' -f 1)
+
+# compare contents
+gitDiff=$(git diff --color --unified=0 "${HOME}/.ssh/authorized_keys" "${HOME}/.ssh/authorized_keys.new" | grep -vE '(\+\+\+|---|diff|index|@@)')
+
+# ensure new is not-empty, check if different, log the change, and update the file
+if [[ "$newSize" -gt "0" ]] && [[ -n "$gitDiff" ]]; then
+    # backup existing authorized_keys, if one exists
+    if [[ -f "${HOME}/.ssh/authorized_keys" ]]; then
+        cp "${HOME}/.ssh/authorized_keys" "${HOME}/.ssh/authorized_keys.old"
+    fi
+
+    mv "${HOME}/.ssh/authorized_keys.new" "${HOME}/.ssh/authorized_keys"
+    echo "$gitDiff" | "$scriptRoot/discord.sh" -c 'white' -t 'Auth Keys Updated'
+fi
+