--- /dev/null
+"$tool"/remote/site-x509-key-decrypt postgresql."$local_domainname" |
+"$tool"/remote/ssh root@"$local_fqdn" ' \
+ set -efux
+ sudo install -d -m 1771 -o postgres -g postgres-data \
+ /etc/postgresql \
+ /etc/postgresql/9.1 \
+ /etc/postgresql/9.1/main
+ sudo install -m 644 -o postgres -g postgres /dev/stdin \
+ /etc/postgresql/9.1/main/.gitignore <<-EOF
+ server.key
+ EOF
+ sudo install -m 400 -o postgres -g postgres \
+ /dev/stdin \
+ /etc/postgresql/9.1/main/server.key
+ '