add some automation
authorIan Kelling <ian@iankelling.org>
Mon, 1 May 2023 02:29:33 +0000 (22:29 -0400)
committerIan Kelling <ian@iankelling.org>
Mon, 1 May 2023 02:29:41 +0000 (22:29 -0400)
distro-end
machine_specific/bk/filesystem/etc/cron.daily/stream-cert [new file with mode: 0755]

index bcfe627e94d87cd62d704ddeba9111cdb5c19488..a9ab55a1e2ce3fd602960cdf9f543598ee9bcf3f 100755 (executable)
@@ -883,6 +883,14 @@ EOF
     end
     ;;
 esac
+
+case $HOSTNAME in
+  bk)
+    /etc/cron.daily/stream-cert
+    web-conf -c /etc/cert-live.fsf.org -p 443 -f 8000 apache2 live.fsf.org
+    ;;
+  esac
+
 ###### end website setup
 
 ########### end section including li/lj ###############
diff --git a/machine_specific/bk/filesystem/etc/cron.daily/stream-cert b/machine_specific/bk/filesystem/etc/cron.daily/stream-cert
new file mode 100755 (executable)
index 0000000..32b9018
--- /dev/null
@@ -0,0 +1,5 @@
+#!/bin/bash
+cert_dir=/etc/cert-live.fsf.org
+mkdir -p $cert_dir
+cd $cert_dir
+rsync -e 'ssh -o StrictHostKeyChecking=accept-new' -tL --perms streamserver0p.fsf.org:/etc/letsencrypt/live/streamserver0p.fsf.org/{fullchain,privkey}.pem .