X-Git-Url: https://git.cyclocoop.org/?a=blobdiff_plain;f=etc%2Fnginx%2Fsite.d%2Flhc-remorque%2Fremote.sh;fp=etc%2Fnginx%2Fsite.d%2Flhc-remorque%2Fremote.sh;h=d86a0392a3e34384a233a56039bbbfe053e568c0;hb=b7595a000cae850e0702938336ce116376bc7d67;hp=0000000000000000000000000000000000000000;hpb=e61ce31922a217eafcaa2a2d05d906f9032133e9;p=lhc%2Fateliers.git

diff --git a/etc/nginx/site.d/lhc-remorque/remote.sh b/etc/nginx/site.d/lhc-remorque/remote.sh
new file mode 100644
index 0000000..d86a039
--- /dev/null
+++ b/etc/nginx/site.d/lhc-remorque/remote.sh
@@ -0,0 +1,22 @@
+gpg --decrypt "$tool"/var/sec/ssh/wiki-"$site".gpg |
+rule ssh -l root ' \
+	set -e -f -u -x
+	sudo install -d -m 1751 -o lhc -g lhc \
+	 /home/lhc \
+	 /home/lhc/var \
+	 /home/lhc/var/ikiwiki
+	sudo install -d -m 2770 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
+	 /home/lhc/var/ikiwiki/remorque
+	getent passwd wiki-'"'$site'"' >/dev/null ||
+	sudo adduser wiki-'"'$site'"' \
+	 --disabled-login \
+	 --disabled-password \
+	 --group \
+	 --home /home/lhc/var/ikiwiki/"$site" \
+	 --shell /bin/false \
+	 --system
+	sudo install -d -m 750 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
+	 /home/lhc/var/ikiwiki/remorque/etc/ssh
+	sudo install    -m 400 -o wiki-'"'$site'"' -g wiki-'"'$site'"' /dev/stdin \
+	 /home/lhc/var/ikiwiki/remorque/etc/ssh/id_rsa
+ '