chore(tooling): integrate forgejo workflow's deploy step into the makefile's

.forgejo/workflows/main.yaml

@@ -26,11 +26,6 @@ jobs:
           make check no-dirty
       - name: 'deploy'
         run: |
-          umask 077
+          make deploy
-          printf '%s' "$SSH_PRIVATE_KEY" | base64 -d > private_key
-          SSHOPTS="-i private_key -o StrictHostKeyChecking=accept-new"
-          rsync -a --delete -e "ssh ${SSHOPTS}" public/ www@www.adyxax.org:/srv/www/public/
-          rsync -e "ssh ${SSHOPTS}" search/search www@www.adyxax.org:/srv/www/
-          ssh ${SSHOPTS} www@www.adyxax.org "chmod +x search; systemctl --user restart www-search"
         env:
           SSH_PRIVATE_KEY: '${{ secrets.SSH_PRIVATE_KEY }}'

GNUmakefile

@@ -36,9 +36,18 @@ serve: ## make serve		# hugo web server development mode
 ##### Operations ###############################################################
 .PHONY: deploy
 deploy: ## make deploy
-	rsync -a --delete public/ www@www.adyxax.org:/srv/www/public/
+	umask 077
-	rsync search/search www@www.adyxax.org:/srv/www/
+	if [ -n "${SSH_PRIVATE_KEY:-}" ]; then
-	ssh www@www.adyxax.org "systemctl --user restart www-search"
+	    cleanup() {
+	        rm -f private_key
+	    }
+	    trap cleanup EXIT
+	    printf '%s' "$SSH_PRIVATE_KEY" | base64 -d > private_key
+	    SSHOPTS="-i private_key -o StrictHostKeyChecking=accept-new"
+	fi
+	rsync -a --delete -e "ssh ${SSHOPTS:-}" public/ www@www.adyxax.org:/srv/www/public/
+	rsync -e "ssh ${SSHOPTS:-}" search/search www@www.adyxax.org:/srv/www/
+	ssh ${SSHOPTS:-} www@www.adyxax.org "chmod +x search; systemctl --user restart www-search"
 
 ##### Quality ##################################################################
 .PHONY: check