-case $USER in
- ian|iank)
- # p needs to go first so .ssh link is created, then config link inside it
- m common-file-setup ${all_dirs[@]}
- if [[ -d /etc/bind/bind-writable ]]; then
- # need bind writable dir for nsupdate, or else we get
- # named[20823]: /etc/bind/db.iank.pw.jnl: create: permission denied
- m s chgrp bind /etc/bind/bind-writable
- fi
- if [[ -e /etc/davpass ]] && getent group www-data &>/dev/null; then
- s chgrp www-data /etc/davpass
- fi
- m sudo -H -u traci "$BASH_SOURCE"
- ;;
- traci)
- m common-file-setup ${c_dirs[@]}
- ;;
- *)
- echo "$0: error: unexpected user"; exit 1
- ;;
+case $user in
+ iank)
+ files=(/p/c/machine_specific/*/filesystem/etc/ssh/*_key
+ /p/c/filesystem/etc/openvpn/client/*.key
+ /p/c/filesystem/etc/openvpn/easy-rsa/keys/*.key
+ /p/c/machine_specific/kw/filesystem/etc/openvpn/client/*.key
+ )
+ if [[ -e ${files[0]} ]]; then
+ chmod 600 ${files[@]}
+ fi
+ # p needs to go first so .ssh link is created, then config link inside it
+ m common-file-setup ${all_dirs[@]}
+
+ #### begin special extra stuff ####
+ install -d -m700 ~/gpg-agent-socket
+
+ f=/var/lib/bind
+ if [[ -e $f ]]; then
+ # reset to the original permissions.
+ m s chgrp -R bind $f
+ m s chmod g+w $f
+ fi
+ sudo bash -c 'shopt -s nullglob; for f in /etc/bind/*.key /etc/bind/*.private /etc/bind/key.*; do chgrp bind $f; done'
+ if [[ -e /etc/davpass ]] && getent group www-data &>/dev/null; then
+ s chgrp www-data /etc/davpass
+ fi
+ if [[ -e /var/lib/znc ]] && getent group znc; then
+ s chown -R znc:znc /var/lib/znc
+ fi
+ /a/exe/lnf -T /p/arbtt-capture.log ~/.arbtt/capture.log
+ f=/etc/prometheus-htpasswd
+ if [[ -e $f ]]; then
+ s chmod 640 $f /etc/prometheus-pass
+ s chown root:www-data $f
+ if getent passwd prometheus; then
+ s chown root:prometheus /etc/prometheus-pass
+ fi
+ fi
+
+ ##### end special extra stuff #####
+
+ if [[ -e /etc/openvpn ]]; then
+ sudo bash -c 'shopt -s nullglob && cd /etc/openvpn && for f in client/* server/*; do ln -sf $f .; done'
+ fi
+
+ m sudo -H -u user2 "${BASH_SOURCE[0]}"
+
+ f=/a/bin/distro-setup/system-status
+ if [[ -x $f ]]; then
+ $f _
+ fi
+ mkdir -p ~/.local
+ echo 0 >~/.local/conflink
+
+ ;;
+ user2)
+ m common-file-setup ${c_dirs[@]}
+ ;;
+ *)
+ echo "$0: error: unexpected user"; exit 1
+ ;;