etc/nginx/site.d/cyclo-vie/remote.sh

   1 gpg --decrypt "$tool"/var/sec/ssh/wiki-"$site".gpg |
   2 "$tool"/remote/ssh root@"$local_ipv4" ' \
   3         set +x
   4         key=$(cat)
   5         set -e -f -u -x
   6         sudo install -d -m 1751 -o cyclo -g cyclo \
   7          /home/cyclo \
   8          /home/cyclo/var \
   9          /home/cyclo/var/ikiwiki
  10         getent passwd wiki-'"'$site'"' >/dev/null ||
  11         sudo adduser wiki-'"'$site'"' \
  12          --disabled-login \
  13          --disabled-password \
  14          --group \
  15          --home /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi \
  16          --shell /bin/false \
  17          --system
  18         sudo install -d -m 2770 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
  19          /home/cyclo/var/ikiwiki/'"'$site'"'
  20         sudo install -d -m 750 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
  21          /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh
  22         sudo install    -m 400 -o wiki-'"'$site'"' -g wiki-'"'$site'"' /dev/stdin \
  23          /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh/id_rsa <<-EOF
  24                 $key
  25                 EOF
  26         sudo install -d -m 2770 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \
  27          /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi
  28         sudo install -d -m 750 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \
  29          /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh
  30         sudo install    -m 400 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' /dev/stdin \
  31          /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh/id_rsa <<-EOF
  32                 $key
  33                 EOF
  34  '