Commit 36d2f367 authored by Etersoft sysadmin's avatar Etersoft sysadmin

initial commit copy_certs_to_hosts

parent 4925c238
#!/bin/sh
# Размещает сертификаты на нужных местах нужных серверов
fatal()
{
echo "Fatal Error"
exit 1
}
PRIVATEPEM="$(pwd)/etersoft_private.pem"
cd sites
scp roundcube.eterhost.ru.crt rt.etersoft.ru.crt sales.etersoft.ru.crt cyradm.eterhost.ru.crt \
sec.office.etersoft.ru.crt time.office.etersoft.ru.crt wiki.office.etersoft.ru.crt \
priv:/etc/nginx/ssl/ || fatal
scp "$PRIVATEPEM" priv:/etc/nginx/ssl/etersoft.pem || fatal
ssh priv service nginx restart
scp bugs.etersoft.ru.crt \
bugs:/etc/nginx/ssl/ || fatal
scp "$PRIVATEPEM" bugs:/etc/nginx/ssl/etersoft.pem || fatal
ssh bugs service nginx restart
scp mysql.eterhost.ru.crt \
host03:/etc/nginx/ssl/ || fatal
scp "$PRIVATEPEM" host03:/etc/nginx/ssl/etersoft.pem || fatal
ssh host03 service nginx restart
do_pem()
{
test -f "$1" || return
cat "$1" "$PRIVATEPEM" \
> "$2"
}
# im.etersoft.ru
do_pem im.etersoft.ru.crt im.etersoft.ru.tmp || fatal
scp im.etersoft.ru.tmp \
im.etersoft.ru:/etc/jabberd2/ssl/im.etersoft.ru.pem || fatal
rm -f im.etersoft.ru.tmp
ssh im.etersoft.ru service jabberd2 restart
# mail.etersoft.ru
do_pem mail.etersoft.ru.crt mail.etersoft.ru.tmp || fatal
scp mail.etersoft.ru.tmp \
mail:/etc/postfix/tls/mail.etersoft.ru_full.pem || fatal
rm -f mail.etersoft.ru.tmp
ssh mail service postfix restart
scp "$PRIVATEPEM" mail:/var/lib/imap/ssl/etersoft.pem || fatal
scp mail.etersoft.ru.crt mail:/var/lib/imap/ssl/mail.etersoft.ru.crt || fatal
ssh mail service cyrus-imapd restart
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment