bin/setup: The `cert' directory doesn't need to be group-writable.

[distorted-letsencrypt] / bin / setup

#! /bin/sh
set -ex

user=letsencrypt
home=$(getent passwd $user | cut -d: -f6)
cd $home

while read d m u g; do
  mkdir -p $d
  chmod $m $d
  chown $u:$g $d
done <<EOF
.                                        755    root    root
.cache                                  2775    root    $user
.config                                 2775    root    $user
.local                                  2775    root    $user
cert                                    2755    root    $user
etc                                     2770    root    $user
log                                     2775    root    $user
tmp                                     2770    root    $user
webroot                                  755    root    root
webroot/.well-known                      755    root    root
webroot/.well-known/acme-challenge      2775    root    $user
EOF