etc/nginx/site.d/davical/remote.sh

   1 install -d -m 700 \
   2  "$tool"/var/sec \
   3  "$tool"/var/sec/"$site"
   4 if test ! -e "$tool"/var/sec/"$site"/admin.pass.gpg
   5  then gpg --encrypt $gpg_options -o "$tool"/var/sec/"$site"/admin.pass.gpg <<-EOF
   6                 $(stdbuf --output 0 tr -d -c '[:alnum:]' <"${random:-/dev/urandom}" | head -c 22)
   7                 EOF
   8  fi
   9
  10 gpg --decrypt ${gpg_options-} "$tool"/var/sec/"$site"/admin.pass.gpg |
  11 "$tool"/remote/ssh root@"$local_fqdn" '
  12         set -eux
  13         test ! -e /root/.'"$site"'_pass
  14         install -m 400 -o root -g root /dev/stdin \
  15          /root/.'"$site"'_pass
  16  '