etc/nginx/site.d/cyclo-3615/remote.sh

   1 gpg --decrypt "$tool"/var/sec/ssh/wiki-"$site".gpg |
   2 "$tool"/remote/ssh root@"$local_ipv4" ' \
   3         set +x
   4         key=$(cat)
   5         set -e -f -u -x
   6         sudo install -d -m 1751 -o cyclo -g cyclo \
   7          /home/cyclo \
   8          /home/cyclo/var \
   9          /home/cyclo/var/ikiwiki
  10         getent passwd wiki-'"'$site'"' >/dev/null ||
  11         sudo adduser wiki-'"'$site'"' \
  12          --disabled-login \
  13          --disabled-password \
  14          --group \
  15          --home /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi \
  16          --shell /bin/false \
  17          --system
  18         sudo chfn --full-name=wiki-'"'$site'"' wiki-'"'$site'"'
  19         sudo install -d -m 2770 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
  20          /home/cyclo/var/ikiwiki/'"'$site'"'
  21         sudo install -d -m 750 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
  22          /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh
  23         sudo install    -m 400 -o wiki-'"'$site'"' -g wiki-'"'$site'"' /dev/stdin \
  24          /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh/id_rsa <<-EOF
  25                 $key
  26                 EOF
  27         sudo install -d -m 2770 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \
  28          /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi
  29         sudo install -d -m 750 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \
  30          /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh
  31         sudo install    -m 400 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' /dev/stdin \
  32          /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh/id_rsa <<-EOF
  33                 $key
  34                 EOF
  35  '