Ajout : vm_hosted : lhc-remorque .

[lhc/ateliers.git] / etc / nginx / site.d / lhc-remorque / remote.sh

diff --git a/etc/nginx/site.d/lhc-remorque/remote.sh b/etc/nginx/site.d/lhc-remorque/remote.sh
new file mode 100644 (file)
index 0000000..d86a039
--- /dev/null
+++ b/etc/nginx/site.d/lhc-remorque/remote.sh
@@ -0,0 +1,22 @@
+gpg --decrypt "$tool"/var/sec/ssh/wiki-"$site".gpg |
+rule ssh -l root ' \
+       set -e -f -u -x
+       sudo install -d -m 1751 -o lhc -g lhc \
+        /home/lhc \
+        /home/lhc/var \
+        /home/lhc/var/ikiwiki
+       sudo install -d -m 2770 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
+        /home/lhc/var/ikiwiki/remorque
+       getent passwd wiki-'"'$site'"' >/dev/null ||
+       sudo adduser wiki-'"'$site'"' \
+        --disabled-login \
+        --disabled-password \
+        --group \
+        --home /home/lhc/var/ikiwiki/"$site" \
+        --shell /bin/false \
+        --system
+       sudo install -d -m 750 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \
+        /home/lhc/var/ikiwiki/remorque/etc/ssh
+       sudo install    -m 400 -o wiki-'"'$site'"' -g wiki-'"'$site'"' /dev/stdin \
+        /home/lhc/var/ikiwiki/remorque/etc/ssh/id_rsa
+ '