local/duplicity-configure

   1 #!/bin/sh -eu
   2 tool=$(readlink -e "${0%/*}/..")
   3 . "$tool"/local/lib.sh
   4
   5 "$tool"/local/apt-get-install duplicity
   6 home="/home/backup"
   7 "$tool"/local/adduser backup \
   8  --disabled-password \
   9  --group \
  10  --home "$home" \
  11  --shell /bin/bash \
  12  --system
  13 sudo usermod --home "$home" backup
  14 sudo install -d -m 750 -o backup -g backup \
  15  "$home" \
  16  "$home"/etc \
  17  "$home"/etc/gpg \
  18  "$home"/etc/ssh
  19 sudo install -d -m 770 -o backup -g backup \
  20  "$home"/archive \
  21  "$home"/bin \
  22  "$home"/data \
  23  "$home"/snapshot
  24 getent group sudo backup |
  25 while IFS=: read -r group x x users
  26  do while test -n "$users" && IFS=, read -r user users <<-EOF
  27                 $users
  28                 EOF
  29          do eval home="~$user"
  30                 sudo cat "$home"/etc/ssh/authorized_keys
  31          done
  32  done |
  33 sudo install -m 640 -o backup -g backup /dev/stdin \
  34  "$home"/etc/ssh/authorized_keys
  35 sudo ln -fns etc/gpg "$home"/.gnupg