migrate GoDaddy auth → Bearer PAT (TK-10 key rotation); sso-key fallback retained

77b431020f5a21d20712c7aecb81ee1735c1e225 · 2026-07-27 20:05:44 -0700 · Steve Abrams

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Files touched

M DEPLOY-NOW.sh

Diff

commit 77b431020f5a21d20712c7aecb81ee1735c1e225
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Jul 27 20:05:44 2026 -0700

    migrate GoDaddy auth → Bearer PAT (TK-10 key rotation); sso-key fallback retained
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 DEPLOY-NOW.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/DEPLOY-NOW.sh b/DEPLOY-NOW.sh
index 7db567c..411fba4 100755
--- a/DEPLOY-NOW.sh
+++ b/DEPLOY-NOW.sh
@@ -15,8 +15,10 @@ COOKIE_SECRET="${COOKIE_SECRET:-$(openssl rand -hex 32)}"
 
 echo "── 1. Add DNS A record via GoDaddy ──"
 source ~/Projects/secrets-manager/.env
+# Prefer a Bearer Personal Access Token (TK-10 key rotation); fall back to legacy sso-key.
+if [ -n "${GODADDY_PAT:-}" ]; then GD_AUTH="Bearer ${GODADDY_PAT}"; else GD_AUTH="sso-key ${GODADDY_API_KEY}:${GODADDY_API_SECRET}"; fi
 curl -fsSX PUT "https://api.godaddy.com/v1/domains/agentabrams.com/records/A/sdcc" \
-  -H "Authorization: sso-key ${GODADDY_API_KEY}:${GODADDY_API_SECRET}" \
+  -H "Authorization: ${GD_AUTH}" \
   -H "Content-Type: application/json" \
   -d "[{\"data\":\"${KAMATERA_IP}\",\"ttl\":600}]" \
   && echo "  ✓ DNS A record set"

← 6628681 gitignore: add missing standard excludes (tmp/ dist/ build/ · back to Norma Sdcc Pitch · (newest)