# ollivanders: CI deploy keys for the static product sites (package-owned: ctg-ollivanders-ssh).
# Source of truth: ctg-infrastructure packaging/ctg-ops/files/ollivanders/etc/authorized_keys.d/canutethegreat.
# sshd reads this through the AuthorizedKeysFile drop-in 51-ctg-authorized-keys.conf. Every key here MUST carry a
# forced command (rrsync confined to ONE inbox folder) and `from=` (the CI runners' egress addresses): Rustinion's
# persistence monitor treats a package-shipped key as expected only with both, and raises anything else.
# Created 2026-10-28 by the agent that built the product sites (patronus commit c6155edf, "deployed via the ollivanders
# watcher pattern"); used by .forgejo/workflows/deploy-site.yml (secret OLLIVANDERS_DEPLOY_KEY) in the horcrux and
# patronus repos; the deploy-watcher timers pick up what lands in the inboxes.
from="24.18.167.154,44.253.153.213,52.88.228.210,44.238.163.95,52.25.28.82,216.211.130.140,52.43.196.131,32.191.129.219",command="/usr/bin/rrsync -no-lock /home/canutethegreat/_deploy-horcrux-site/",restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIaCR635AuN9ZvWoMCygR4v4mDj/OGZi05ad2eeqWRE+ horcrux-site-deploy
from="24.18.167.154,44.253.153.213,52.88.228.210,44.238.163.95,52.25.28.82,216.211.130.140,52.43.196.131,32.191.129.219",command="/usr/bin/rrsync -no-lock /home/canutethegreat/_deploy-patronus-site/",restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDWGOfvOxes72OfKW1R/pmUBPilfLZEDks9FqXuOshTl patronus-site-deploy
