bin/setup: The `cert' directory doesn't need to be group-writable.
[distorted-letsencrypt] / bin / setup
CommitLineData
55799f78
MW
1#! /bin/sh
2set -ex
3
4user=letsencrypt
5home=$(getent passwd $user | cut -d: -f6)
6cd $home
7
8while read d m u g; do
9 mkdir -p $d
10 chmod $m $d
11 chown $u:$g $d
12done <<EOF
13. 755 root root
14.cache 2775 root $user
15.config 2775 root $user
16.local 2775 root $user
aab32fdb 17cert 2755 root $user
55799f78
MW
18etc 2770 root $user
19log 2775 root $user
20tmp 2770 root $user
21webroot 755 root root
22webroot/.well-known 755 root root
23webroot/.well-known/acme-challenge 2775 root $user
24EOF