add some automation

[distro-setup] / machine_specific / bk / filesystem / etc / cron.daily / stream-cert

diff --git a/machine_specific/bk/filesystem/etc/cron.daily/stream-cert b/machine_specific/bk/filesystem/etc/cron.daily/stream-cert
new file mode 100755 (executable)
index 0000000..32b9018
--- /dev/null
+++ b/machine_specific/bk/filesystem/etc/cron.daily/stream-cert
@@ -0,0 +1,5 @@
+#!/bin/bash
+cert_dir=/etc/cert-live.fsf.org
+mkdir -p $cert_dir
+cd $cert_dir
+rsync -e 'ssh -o StrictHostKeyChecking=accept-new' -tL --perms streamserver0p.fsf.org:/etc/letsencrypt/live/streamserver0p.fsf.org/{fullchain,privkey}.pem .