From 8522da90e09e7f0855259c49e7f85084749e2245 Mon Sep 17 00:00:00 2001
From: Sebastian Rust <srust@posteo.net>
Date: Sun, 8 Feb 2026 09:10:42 +0100
Subject: [PATCH] feat(bundle): added pubkey

---
 .gitea/workflows/build.yml | 9 +++++----
 bootstrap.yml              | 1 +
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index fa3dc67..395644d 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -47,16 +47,17 @@ jobs:
 
       - name: Upload to release storage
         run: |
-          echo "Uploading bootstrap.run and checksums to release storage ${{ github.server_url }}/api/packages/${{ github.repository_owner }}/generic/bootstrap/latest/" &&
+          echo "Uploading bootstrap.run and checksums to release storage https://git.rust.cloud/api/packages/${{ github.repository_owner }}/generic/bootstrap/latest/" &&
           curl -fsS -X PUT \
             -H "Authorization: token ${{ secrets.PACKAGE_TOKEN }}" \
             -T bootstrap.run \
-            "${{ github.server_url }}/api/packages/${{ github.repository_owner }}/generic/bootstrap/latest/bootstrap.run"
-
+            "https://git.rust.cloud/api/packages/${{ github.repository_owner }}/generic/bootstrap/latest/bootstrap.run"
           curl -fsS -X PUT \
             -H "Authorization: token ${{ secrets.PACKAGE_TOKEN }}" \
             -T bootstrap.run.sha256 \
-            "${{ github.server_url }}/api/packages/${{ github.repository_owner }}/generic/bootstrap/latest/bootstrap.run.sha256"
+            "https://git.rust.cloud/api/packages/${{ github.repository_owner }}/generic/bootstrap/latest/bootstrap.run.sha256"
+        env:
+          server_url: "https://git.rust.cloud"
         # env:
         #   github.repository_owner: harlequix
 
diff --git a/bootstrap.yml b/bootstrap.yml
index c177d34..a57987b 100644
--- a/bootstrap.yml
+++ b/bootstrap.yml
@@ -29,6 +29,7 @@
   vars:
     # User defaults (override via -e or vars file)
     user_name: "operator"
+    user_pubkey: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIElTjmqtmr7xPTDjmWz7bN9vw7HXZds8Hxc99qBEGN/Y jack@turing"
 
     # SSH hardening defaults - secure by default
     ssh_permit_root_login: "no"