fix: chmod for ssh keys

issue caused by nix-index memory usage

.github/workflows/arrow.yml

@@ -123,10 +123,12 @@ jobs:
         if: inputs.action == 'create'
         run: |
           echo "${{ env.DEPLOY_IDENTITY_BASE64 }}" | base64 -d > deploy_ed25519
+          chmod 0600 deploy_ed25519
           echo "${{ env.ARROW_IDENTITY_BASE64 }}" | base64 -d > arrow_ed25519
+          chmod 0600 arrow_ed25519
 
       - name: Copy Identity File to Host
         if: inputs.action == 'create'
         run: |
-          ssh -o StrictHostKeyChecking=accept-new noah@${{ steps.host.outputs.stdout }} 'mkdir -pv .ssh'
+          ssh -i deploy_ed25519 -o StrictHostKeyChecking=accept-new noah@${{ steps.host.outputs.stdout }} 'mkdir -pv .ssh'
           scp -i deploy_ed25519 arrow_ed25519 noah@${{ steps.host.outputs.stdout }}:~/.ssh/id_ed25519

hosts/arrow/modules.nix

@@ -20,6 +20,10 @@
     services.caddy.enable = true;
     services.transmission.enable = true;
 
+    # nix-index seems to each up too much memory for Vultr
+    home-manager.users.${globals.user}.programs.nix-index.enable =
+      inputs.nixpkgs.lib.mkForce false;
+
     virtualisation.vmVariant = {
       virtualisation.forwardPorts = [{
         from = "host";

modules/nixos/services/cloudflare.nix

@@ -78,6 +78,10 @@ in {
       owner = "caddy";
       group = "caddy";
     };
+    systemd.services.cloudflare-api-secret.serviceConfig.ExecStartPost = ''
+      /run/current-system/sw/bin/systemctl restart caddy.service
+      /run/current-system/sw/bin/systemctl restart cloudflare-dyndns.service
+    '';
 
     # Wait for secret to exist
     systemd.services.caddy = {