+#!/bin/sh -eu
+tool=$(readlink -e "${0%/*}/..")
+. "$tool"/local/lib.sh
+
+"$tool"/local/apt-get-install duplicity
+home="/home/backup"
+"$tool"/local/adduser backup \
+ --disabled-password \
+ --group \
+ --home "$home" \
+ --shell /bin/bash \
+ --system
+sudo usermod --home "$home" backup
+sudo install -d -m 750 -o backup -g backup \
+ "$home" \
+ "$home"/etc \
+ "$home"/etc/gpg \
+ "$home"/etc/ssh
+sudo install -d -m 770 -o backup -g backup \
+ "$home"/mysql \
+ "$home"/postgres
+getent group sudo backup |
+while IFS=: read -r group x x users
+ do while test -n "$users" && IFS=, read -r user users <<-EOF
+ $users
+ EOF
+ do eval home="~$user"
+ sudo cat "$home"/etc/ssh/authorized_keys
+ done
+ done |
+sudo install -m 640 -o backup -g backup /dev/stdin \
+ "$home"/etc/ssh/authorized_keys
+sudo ln -fns etc/gpg "$home"/.gnupg
+#sudo adduser backup mysql-data
+#sudo adduser backup postgres-data