etc/sv/nginx/remote.sh

   1 for site in $(find "$tool"/etc/nginx/site.d \
   2  -mindepth 1 -maxdepth 1 -type d \
   3  -false ${@:+$(printf -- '-or -name %s\n' "$@")} \
   4  -printf '%f\n')
   5  do
   6         if test -f "$tool"/etc/nginx/site.d/"$site"/x509_host
   7          then
   8                 rule _x509_site_key_decrypt \
   9                  "$(cat "$tool"/etc/nginx/site.d/"$site"/x509_host)" |
  10                 rule ssh -l root ' \
  11                         sudo install -d -m 770 -o root -g root \
  12                          /etc/nginx \
  13                          /etc/nginx/x509.d \
  14                          /etc/nginx/x509.d/'"'$site'"'; \
  15                         sudo install -m 644 -o root -g root /dev/stdin \
  16                          /etc/nginx/x509.d/'"'$site'"'/.gitignore <<-EOF
  17                                 key.pem
  18                                 EOF
  19                         sudo install -m 400 -o root -g root /dev/stdin \
  20                          /etc/nginx/x509.d/'"'$site'"'/key.pem
  21                  '
  22          fi
  23         test ! -r "$tool"/etc/nginx/site.d/"$site"/remote.sh ||
  24         .         "$tool"/etc/nginx/site.d/"$site"/remote.sh
  25  done