X-Git-Url: https://git.cyclocoop.org/?a=blobdiff_plain;f=vm_remote;h=57a3e968d48ab335946cdf10644c4a90d2638cb5;hb=fbbdf3cc3b70bafc30320601465d402a5e615d0e;hp=37e6dc1a0e02973dbc7414d2371e29720520d786;hpb=de0435e3d96f9205fd7a27809d2004d5737469fa;p=lhc%2Fateliers.git diff --git a/vm_remote b/vm_remote index 37e6dc1..57a3e96 100755 --- a/vm_remote +++ b/vm_remote @@ -94,33 +94,24 @@ rule_luks_key_backup () { # SYNTAX: ${gpg_options:---recipient $USER@} DESCRIPTI rule_apache2_key_send () { local -; set +f - for conf in "$tool"/etc/apache2/site.d/*/VirtualHost.conf - do conf=${conf#"$tool"/etc/apache2/site.d/} - local port domain - IFS=. read -r port domain <<-EOF - ${conf%/VirtualHost.conf} - EOF - assert 'test "${port:+set}"' - assert 'test "${domain:+set}"' - local site="$port.$domain" - case $port in - (443) - rule _x509_site_key_decrypt "$domain" | - rule ssh -l root ' \ - sudo install -d -m 770 -o '"$user"' -g '"$user"' \ - /etc/apache2 \ - /etc/apache2/site.d/'"$site"' \ - /etc/apache2/site.d/'"$site"'/x509; \ - sudo install -m 644 -o '"$user"' -g '"$user"' /dev/stdin \ - /etc/apache2/site.d/'"$site"'/x509/.gitignore <<-EOF - key.pem - EOF - sudo install -m 400 -o root -g root \ - /dev/stdin \ - /etc/apache2/'"'$site'"'/x509/key.pem - ' - ;; - esac + for conf in "$tool"/etc/nginx/site.d/*/key_send + do conf=${conf#"$tool"/etc/nginx/site.d/} + local site=${conf%/key_send} + rule _x509_site_key_decrypt \ + "$(cat "$tool"/etc/apache2/site.d/"$site"/key_send)" | + rule ssh -l root ' \ + sudo install -d -m 770 -o '"$user"' -g '"$user"' \ + /etc/apache2 \ + /etc/apache2/x509.d \ + /etc/apache2/x509.d/'"$site"'; \ + sudo install -m 644 -o '"$user"' -g '"$user"' /dev/stdin \ + /etc/apache2/x509.d/'"$site"'/.gitignore <<-EOF + key.pem + EOF + sudo install -m 400 -o root -g root \ + /dev/stdin \ + /etc/apache2/x509.d/'"'$site'"'/key.pem + ' done } rule_dovecot_key_send () { @@ -139,7 +130,7 @@ rule_dovecot_key_send () { /etc/dovecot/"$vm_domainname"/imap/x509/key.pem ' } -rule_gitolite_configure () { +rule_gitolite_git () { ( cd "$tool"/etc/gitolite GIT_SSH=../../lib/ssh \ @@ -147,30 +138,33 @@ rule_gitolite_configure () { SSH_ASKPASS='"$tool"'/lib/ssh-pass \ SSH_ID=git \ ssh-add '"$tool"'/var/sec/ssh/git