From ee2477853805e4df073e36d596c26f54ae27b3a2 Mon Sep 17 00:00:00 2001
From: Rohan Kumar <seirdy@seirdy.one>
Date: Tue, 30 Aug 2022 21:13:57 -0700
Subject: [PATCH] Update for new seirdy.one ssh configs

- Check host key acc. to SSHFP DNS record
- Enforce correct cipher
---
 .build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.build.yml b/.build.yml
index 6722d0c..c34e0a1 100644
--- a/.build.yml
+++ b/.build.yml
@@ -18,7 +18,7 @@ triggers:
     to: seirdy@seirdy.one
 tasks:
   - deps: |
-      echo "StrictHostKeyChecking=no" >> ~/.ssh/config
+      printf "VerifyHostKeyDNS=yes\nKexAlgorithms=sntrup761x25519-sha512@openssh.com\n" >> ~/.ssh/config
       # mirrored at https://seirdy.one/misc/binaries.tar.gz
       rsync -Wv deploy@seirdy.one:/home/deploy/binaries.tar.gz .
       mkdir -p ~/bin