feat: ♻️ 🔀 Merge pull request AnotherStranger#68 from Spice-King/patch-1

Improve security and handling around BORG_AUTHORIZED_KEYS
CrysK · Dec 13, 2023 · 34a827a · 34a827a
2 parents cf5ff48 + 430f90e
commit 34a827a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/entrypoint.sh b/entrypoint.sh
@@ -35,7 +35,7 @@ fi
 
 # if BORG_AUTHORIZED_KEYS is set substitute authorized_keys file
 if [ -n "${BORG_AUTHORIZED_KEYS+x}" ]; then
-    echo -e "${BORG_AUTHORIZED_KEYS}" | sed  -e "s/^/command=\"borg serve ${BORG_SERVE_ADDITIONAL_ARGS} --restrict-to-path \/home\/borg\/backups\" /"  >/home/borg/.ssh/authorized_keys
+    echo -e "${BORG_AUTHORIZED_KEYS}" | sed -re "/^\\s*(\$|#)/! s/^/restrict,command=\"borg serve ${BORG_SERVE_ADDITIONAL_ARGS} --restrict-to-path \/home\/borg\/backups\" /"  >/home/borg/.ssh/authorized_keys
 fi
 chown borg:borg /home/borg/.ssh/authorized_keys
 chmod og-rwx /home/borg/.ssh/authorized_keys