X-Git-Url: https://git.cyclocoop.org/?p=lhc%2Fateliers.git;a=blobdiff_plain;f=etc%2Fnginx%2Fsite.d%2Fcyclo-vie%2Fremote.sh;h=87d6cb545572c3ba5e71a6872ecc5c4636fc8b0d;hp=bd26117b3d2d68ce9d0641e2c6f4a2e3aed822d4;hb=f135690b35e8a5349b210714c0ec04fc3d81e7d8;hpb=d77864fe456677fe385ce8b4137cc1882cd75f18 diff --git a/etc/nginx/site.d/cyclo-vie/remote.sh b/etc/nginx/site.d/cyclo-vie/remote.sh index bd26117..87d6cb5 100644 --- a/etc/nginx/site.d/cyclo-vie/remote.sh +++ b/etc/nginx/site.d/cyclo-vie/remote.sh @@ -1,5 +1,7 @@ gpg --decrypt "$tool"/var/sec/ssh/wiki-"$site".gpg | "$tool"/remote/ssh root@"$local_ipv4" ' \ + set +x + key=$(cat) set -e -f -u -x sudo install -d -m 1751 -o cyclo -g cyclo \ /home/cyclo \ @@ -10,7 +12,7 @@ gpg --decrypt "$tool"/var/sec/ssh/wiki-"$site".gpg | --disabled-login \ --disabled-password \ --group \ - --home /home/cyclo/var/ikiwiki/'"'$site'"' \ + --home /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi \ --shell /bin/false \ --system sudo install -d -m 2770 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \ @@ -18,5 +20,15 @@ gpg --decrypt "$tool"/var/sec/ssh/wiki-"$site".gpg | sudo install -d -m 750 -o wiki-'"'$site'"' -g wiki-'"'$site'"' \ /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh sudo install -m 400 -o wiki-'"'$site'"' -g wiki-'"'$site'"' /dev/stdin \ - /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh/id_rsa + /home/cyclo/var/ikiwiki/'"'$site'"'/etc/ssh/id_rsa <<-EOF + $key + EOF + sudo install -d -m 2770 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \ + /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi + sudo install -d -m 750 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' \ + /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh + sudo install -m 400 -o fcgi-'"'$site'"' -g fcgi-'"'$site'"' /dev/stdin \ + /home/cyclo/var/ikiwiki/'"'$site'"'/fcgi/etc/ssh/id_rsa <<-EOF + $key + EOF '