[openpgp] Automatic WKD deployment from git to Netlify

Dominik Schuermann <dominik@schuermann.eu> Thu, 05 September 2019 16:49 UTC

Return-Path: <dominik@schuermann.eu>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 760081200D7 for <openpgp@ietfa.amsl.com>; Thu, 5 Sep 2019 09:49:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level:
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nPSsH911aed5 for <openpgp@ietfa.amsl.com>; Thu, 5 Sep 2019 09:49:13 -0700 (PDT)
Received: from mx2.mailbox.org (mx2a.mailbox.org [IPv6:2001:67c:2050:104:0:2:25:2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 33012120018 for <openpgp@ietf.org>; Thu, 5 Sep 2019 09:49:12 -0700 (PDT)
Received: from smtp2.mailbox.org (smtp2.mailbox.org [IPv6:2001:67c:2050:105:465:1:2:0]) (using TLSv1.2 with cipher ECDHE-RSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by mx2.mailbox.org (Postfix) with ESMTPS id 09F13A1059 for <openpgp@ietf.org>; Thu, 5 Sep 2019 18:49:10 +0200 (CEST)
X-Virus-Scanned: amavisd-new at heinlein-support.de
Received: from smtp2.mailbox.org ([80.241.60.241]) by gerste.heinlein-support.de (gerste.heinlein-support.de [91.198.250.173]) (amavisd-new, port 10030) with ESMTP id S95eJRHpWoBk for <openpgp@ietf.org>; Thu, 5 Sep 2019 18:49:06 +0200 (CEST)
To: "openpgp@ietf.org" <openpgp@ietf.org>
From: Dominik Schuermann <dominik@schuermann.eu>
Autocrypt: addr=dominik@schuermann.eu; prefer-encrypt=mutual; keydata= xjMEXUsNEBYJKwYBBAHaRw8BAQdAcvZdfsvTZD7v4rq1Us0cu90XnQ/bvYInuY2OcgJXfQDN KkRvbWluaWsgU2Now7xybWFubiA8ZG9taW5pa0BzY2h1ZXJtYW5uLmV1PsKnBBMWCAA4FiEE KbMza0V4B/lHwerWTcbrVoIq6EYFAl1LDRACGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AA IQkQTcbrVoIq6EYWIQQpszNrRXgH+UfB6tZNxutWgiroRlYqAQCQPF5ifJSsvaHhD4M67OY5 ZUHxF/1R+wbCS5B0dhLSVgEA5Zcqd09UQm9hpNUr4dJek3HrDzwRr83gfw8TwON2owTOOARd Sw0QEgorBgEEAZdVAQUBAQdAsD//Q5nexKUjqI6orIam8X1Anlup8NaLd9lLMcbzFUkDAQgH wo8EGBYIACAWIQQpszNrRXgH+UfB6tZNxutWgiroRgUCXUsNEAIbDAAhCRBNxutWgiroRhYh BCmzM2tFeAf5R8Hq1k3G61aCKuhGVNQBALXiFjDe6LFRixxd4rReZp7qy1NTol2M3r+PQpiQ eD9rAP0fNQsr4NDhkHUpOJX/W1b4U7vWVapxVLjk+/3WpoyJBA==
Message-ID: <787b731e-35c9-eeb5-57c1-fc1eeb425e91@schuermann.eu>
Date: Thu, 05 Sep 2019 18:49:05 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/PDL17xvrTMYaw81yo2oAAmHV5fU>
Subject: [openpgp] Automatic WKD deployment from git to Netlify
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Sep 2019 16:49:16 -0000

Hey,

I was in need of a method for deploying keys to WKD that is easy to 
manage by multiple persons.

So this is my simple script for doing this:
https://github.com/cotechde/netlify-wkd

- It uses Netlify as the publishing platform (free & Let's Encrypt)
- Everyone who has access to the git can manage their PGP key(s).
- Keys in the git repo are automatically published every time the repo
   changes by using a simple Python script that is called by Netlify on
   git push
- It uses the openpgpkey subdomain described as the WKD advanced method
- It sets the correct CORS and Content-Type header
   (https://github.com/cotechde/netlify-wkd/blob/master/netlify.toml)

Cheers
Dominik