Centralize deployment settings in the root environment file

Document public domains, ports, upstreams, chat binding, and backup defaults alongside private settings. Validate shared configuration and render Caddy, cgit, and website links from an explicit public allowlist while preserving one installation environment file.

1 files changed, 5 insertions, 4 deletions

diff --git a/src/archive.rs b/src/archive.rs
index 03ec643..4d2c01c 100644
--- a/src/archive.rs
+++ b/src/archive.rs
@@ -24,9 +24,6 @@ use serde_json::Value;
 use crate::project::{Mode, Project, Settings, field};
 use crate::{files, process};
 
-pub(crate) const RECIPIENT: &str = "3346AA3150F8F16828BB0D14F8C66DF77AFECEA6";
-const KEY: &str = "web/.well-known/openpgpkey/luuduct.ai/hu/t76q8xqkeassgy1kr38re1ppj6cpc1dp";
-
 #[derive(Debug)]
 struct Paused<'a> {
     project: &'a Project,
@@ -192,7 +189,11 @@ pub(crate) fn backup(
         .tempdir_in(destination)?;
     let home = temp.path().join("gnupg");
     files::private_dir(&home)?;
-    let key = public_key.map_or_else(|| project.root.join(KEY), Path::to_path_buf);
+    let configuration = stack_config::Config::load(&project.root)?;
+    let key = public_key.map_or_else(
+        || Ok(project.root.join(configuration.value("BACKUP_PUBLIC_KEY")?)),
+        |path| Ok::<_, anyhow::Error>(path.to_path_buf()),
+    )?;
     let operation = backup_inner(
         project,
         destination,