From e71d3f17e33ab93e652bfadb7d97d56b1c672c87 Mon Sep 17 00:00:00 2001
From: hermes <hermes@voidlaptop>
Date: Tue, 22 Sep 2026 15:46:22 +0100
Subject: deploy: ship public_key.txt so curl UA can fetch the key

---
 deploy-docker.sh | 5 +++++
 deploy.sh        | 4 ++++
 2 files changed, 9 insertions(+)

diff --git a/deploy-docker.sh b/deploy-docker.sh
index f6ad4b4..2e72954 100755
--- a/deploy-docker.sh
+++ b/deploy-docker.sh
@@ -57,6 +57,11 @@ cp cv/index.txt public/cv.txt
 cp -r assets/* public/
 cp -r assets/* public/assets/
 
+# nginx maps curl/wget UAs to .txt, so `curl https://jayrup.me/public_key`
+# resolves to /public_key.txt. Single source of truth stays assets/public_key;
+# browsers keep getting the suffixless /public_key.
+cp assets/public_key public/public_key.txt
+
 # Deploy status marker — site-visible proof of the last successful deploy
 printf 'deployed %s commit %s\n' "$(date -u +%Y-%m-%dT%H:%M:%SZ)" "$SHORT_SHA" > public/last-deploy.txt
 
diff --git a/deploy.sh b/deploy.sh
index 9ef565c..9daf85b 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -40,6 +40,10 @@ mkdir -p public/assets
 cp -r assets/* public/
 cp -r assets/* public/assets/
 
+# .txt twin: curl/wget UAs map to .txt, so `curl https://jayrup.me/public_key`
+# resolves to public_key.txt. Source of truth stays assets/public_key.
+cp assets/public_key public/public_key.txt
+
 # 6. Deploy marker
 printf 'deployed %s commit %s\n' "$(date -u +%Y-%m-%dT%H:%M:%SZ)" "$(git rev-parse --short HEAD)" > public/last-deploy.txt
 
-- 
cgit v1.2.3