etc/nginx/site.d/agendav/remote.sh

   1 install -d -m 700 \
   2  "$tool"/var/sec \
   3  "$tool"/var/sec/"$site"
   4 if test ! -e "$tool"/var/sec/"$site"/encryption_key.gpg
   5  then gpg --encrypt $gpg_options -o "$tool"/var/sec/"$site"/encryption_key.gpg <<-EOF
   6                 $(stdbuf --output 0 tr -d -c '[:alnum:]' <"${random:-/dev/urandom}" | head -c 42)
   7                 EOF
   8  fi
   9
  10 cat "$tool"/etc/"$site"/config.php - <<-EOF |
  11         \$config['encryption_key'] = '$(gpg --decrypt "$tool"/var/sec/"$site"/encryption_key.gpg)';
  12         EOF
  13 "$tool"/remote/ssh root@"$local_fqdn" ' \
  14         set -efux
  15         sudo install -d -m 750 -o root -g root \
  16          /etc/'"$site"'
  17         sudo install -m 640 -o root -g root /dev/stdin \
  18          /etc/'"$site"'/config.php
  19  '