# SSH signing key for the release archives. This is currently cloudhead and fintan's keys.

# FIXME: Technically, there should be a release signing key, with a shamir threshold of > 1, with the secret encrypted by something like SOPS.

CLOUDHEAD="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL460KIEccS4881p7PPpiiQBsxF+H5tgC6De6crw9rbU"

FINTAN="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEFsaRqAJ1r6bBFwlcWzJKN7DdjItQDumCNc0wqw6Dvk"

LORENZ="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFhK7CqgIIbSthoNn8ea32krOnMzC807Z+PpBkR2YOVj"

  signers="$(dirname $archive)/signers"

  # Add the signer key to the allowed signers file we pass to ssh-keygen.

  printf "radicle $CLOUDHEAD\n" > $signers

  printf "radicle $FINTAN\n" >> $signers

  printf "radicle $LORENZ\n" >> $signers