ci: push tag

Co-authored-by: Gemini <gemini@google.com>

.github/workflows/build-release.yaml

@@ -7,7 +7,7 @@ on:
       - main
     paths:
       - '**.md'
-      - '.gitea/workflows/**'
+      - '.github/workflows/**'
       - 'md-pdf.ron'
 
 jobs:
@@ -22,11 +22,6 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Install Fonts
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y fonts-liberation
-
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
 
@@ -40,7 +35,7 @@ jobs:
           tar -xJf typst.tar.xz --strip-components=1 -C /usr/local/bin/ typst-x86_64-unknown-linux-musl/typst
           typst --version
 
-      - name: Install Typst & md-pdf (Rust)
+      - name: Install md-pdf (Rust)
         run: |
           cargo install md-pdf
           echo "$HOME/.cargo/bin" >> $GITHUB_PATH
@@ -66,10 +61,19 @@ jobs:
           echo "tag=$NEW_TAG" >> $GITHUB_OUTPUT
           echo "Next version : $NEW_TAG"
 
+      - name: Push Tag
+        run: |
+          git config user.name "Gitea Actions"
+          git config user.email "actions@gitea.local"
+          git tag ${{ steps.version.outputs.tag }}
+          git push origin ${{ steps.version.outputs.tag }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
       # Create release and upload PDF
       # Note: softprops works very well on recent Gitea
       - name: Create Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v1
         if: ${{ steps.version.outputs.tag != '' }} # Safety check
         with:
           tag_name: ${{ steps.version.outputs.tag }}

README.md

@@ -1,3 +1,13 @@
+---
+title: "PIS"
+subtitle: "Policy for Internal Security"
+author: "Rémi Heredero "
+language: "en"
+tags: ["gpg", "ssh", "x509", "YubiKey", "security"]
+toc: false
+template: "simple"
+---
+
 # Policy for Internal Security
 This repo describes my P.I.S. (**P**olicy for **I**nternal **S**ecurity).
 You'll find my personal guidelines for SSH / GPG on YubiKey and how to configure and create a key / certificate.
@@ -195,14 +205,6 @@ This creates the file `id_ed25519_sk-keyring-cert.pub` that is the certificate t
 
 ---
 
-# x509
-
-## Master YubiKey
-I create a certificate in PIV slot 9a with Yubico authenticator. This CA would be used as a Root CA for my server.
-TODO fix with XCA
-
----
-
 # Troubleshooting
 ## GPG
 Sometimes, for unknown (for me) reason, you need to kill the gpg-agent to be able to use the YubiKey again.