exozyme/scripts
3
1
Fork 1
Code Issues Pull requests Projects Releases Wiki Activity

Use default ACLs so we don't need to setfacl every cert renewel

Browse source
This commit is contained in:
Anthony Wang 2022-01-16 11:04:21 -06:00
parent 5a475dce35
commit f80292a316
Signed by: a
GPG key ID: BC96B00AEC5F2D76
2 changed files with 0 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
expand-cert
View file

@ -2,6 +2,3 @@
# Expand the certificate
echo exozy.me {chat,ci,cloud,desk,game,git,hub,media,office,portal,server,social,ta180m,tube,www}.exozy.me | sed "s/ /,/g" | xargs sudo certbot certonly --cert-name exozy.me --nginx -n -d
# Give the LDAP user permission to access them
sudo setfacl -R -m user:ldap:r-x /etc/letsencrypt/archive/

7
renew-cert
View file

@ -1,7 +0,0 @@
#!/usr/bin/bash
# Renew the certificate
sudo certbot -q renew
# Give the LDAP user permission to access them
sudo setfacl -R -m user:ldap:r-x /etc/letsencrypt/archive/