about summary refs log tree commit diff
diff options
context:
space:
mode:
authorGriffin Smith <grfn@gws.fyi>2021-03-28T23·53-0400
committerglittershark <grfn@gws.fyi>2021-03-29T00·00+0000
commit3678a333275ac9a2b2aac01ba6a65b9edd8b5c4e (patch)
tree96ad8e9be41645ceee649a3296c3bc7b76a44781
parent70a8c44a07b1cacc82e68f7144c75c7e1b9d63bd (diff)
fix(gws.fyi): Explicitly specify personal profile to AWS r/2360
Explicitly pass --profile personal to AWS commands, to avoid deploying
this to the wrong aws account on accident

Change-Id: Iff8236967adcfdedfbace8930031db9adf60e3d1
Reviewed-on: https://cl.tvl.fyi/c/depot/+/2699
Reviewed-by: glittershark <grfn@gws.fyi>
Tested-by: BuildkiteCI
-rw-r--r--users/glittershark/gws.fyi/Makefile1
-rw-r--r--users/glittershark/gws.fyi/default.nix4
2 files changed, 3 insertions, 2 deletions
diff --git a/users/glittershark/gws.fyi/Makefile b/users/glittershark/gws.fyi/Makefile
index 83b60ef9bb52..a21bfe7b872e 100644
--- a/users/glittershark/gws.fyi/Makefile
+++ b/users/glittershark/gws.fyi/Makefile
@@ -16,6 +16,7 @@ renew:
 		--config-dir $(shell pwd)/letsencrypt/config
 	@echo "Reimporting certificate"
 	@aws acm import-certificate \
+	    --profile personal \
 	    --certificate file://letsencrypt/config/live/www.gws.fyi/cert.pem \
 	    --certificate-chain file://letsencrypt/config/live/www.gws.fyi/fullchain.pem \
 	    --private-key file://letsencrypt/config/live/www.gws.fyi/privkey.pem \
diff --git a/users/glittershark/gws.fyi/default.nix b/users/glittershark/gws.fyi/default.nix
index 38d64cef5700..8b1742bf5646 100644
--- a/users/glittershark/gws.fyi/default.nix
+++ b/users/glittershark/gws.fyi/default.nix
@@ -21,8 +21,8 @@ let
     '';
 
 in writeShellScript "deploy.sh" ''
-  ${awscli}/bin/aws s3 sync ${website}/ ${bucket}
-  ${awscli}/bin/aws cloudfront create-invalidation \
+  ${awscli}/bin/aws --profile personal s3 sync ${website}/ ${bucket}
+  ${awscli}/bin/aws --profile personal cloudfront create-invalidation \
     --distribution-id "${distributionID}" \
     --paths "/*"
   echo "Deployed to http://gws.fyi"