From 42f00b045a92174ed148870bc3024bd4de50ca9b Mon Sep 17 00:00:00 2001
From: Bob Sponge <b-sponge@krusty.local>
Date: Thu, 18 Sep 2025 14:07:55 +0000
Subject: [PATCH] deploy: bring the tunnel up from .env

---
 deploy/relay.sh | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 deploy/relay.sh

diff --git a/deploy/relay.sh b/deploy/relay.sh
new file mode 100644
index 0000000..e37e8f4
--- /dev/null
+++ b/deploy/relay.sh
@@ -0,0 +1,12 @@
+#!/bin/sh
+# Bring up the relay tunnel. Expects .env alongside this script.
+set -eu
+. "$(dirname "$0")/../.env"
+
+: "${RELAY_ENDPOINT:?RELAY_ENDPOINT not set}"
+: "${RELAY_USER:?RELAY_USER not set}"
+: "${RELAY_TOKEN:?RELAY_TOKEN not set}"
+
+exec /usr/bin/socat \
+  TCP-LISTEN:8443,reuseaddr,fork \
+  OPENSSL:"${RELAY_ENDPOINT#https://}",verify=0