Page Menu
Home
DevCentral
Search
Configure Global Search
Log In
Files
F3745275
D691.id1741.diff
No One
Temporary
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Award Token
Flag For Later
Size
1 KB
Referenced Files
None
Subscribers
None
D691.id1741.diff
View Options
diff --git a/roles/mumble/certificates/files/update-mumble-certificates b/roles/mumble/certificates/files/update-mumble-certificates
new file mode 100755
--- /dev/null
+++ b/roles/mumble/certificates/files/update-mumble-certificates
@@ -0,0 +1,23 @@
+#!/bin/sh
+
+# -------------------------------------------------------------
+# Deploy Mumble certificate on Murmur
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# Created: 2016-11-03
+# License: Trivial work, not eligible to copyright
+# -------------------------------------------------------------
+
+: ${JAIL_HOSTNAME='mumble.nasqueron.org'}
+: ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"}
+: ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"}
+: ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`}
+
+cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt
+cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key
+
+# murmur has uid 338
+chown 338:0 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key
+chmod 400 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key
+
+jexec $JAIL_ID service murmur restart
diff --git a/roles/mumble/certificates/init.sls b/roles/mumble/certificates/init.sls
new file mode 100644
--- /dev/null
+++ b/roles/mumble/certificates/init.sls
@@ -0,0 +1,13 @@
+# -------------------------------------------------------------
+# Salt — Deploy SSL certificate for Mumble server
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# Created: 2016-11-03
+# License: Trivial work, not eligible to copyright
+# -------------------------------------------------------------
+
+mumble_certificates_update_script:
+ file.managed:
+ - name: /usr/local/bin/update-mumble-certificates
+ - source: salt://roles/mumble/certificates/files/update-mumble-certificates
+
File Metadata
Details
Attached
Mime Type
text/plain
Expires
Sat, Nov 16, 13:39 (20 h, 5 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
2247496
Default Alt Text
D691.id1741.diff (1 KB)
Attached To
Mode
D691: Allow to update Mumble server certificates
Attached
Detach File
Event Timeline
Log In to Comment