Page Menu
Home
DevCentral
Search
Configure Global Search
Log In
Files
F12241556
No One
Temporary
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Award Token
Flag For Later
Size
1 KB
Referenced Files
None
Subscribers
None
View Options
diff --git a/roles/mumble/certificates/files/update-mumble-certificates b/roles/mumble/certificates/files/update-mumble-certificates
new file mode 100755
index 0000000..167482a
--- /dev/null
+++ b/roles/mumble/certificates/files/update-mumble-certificates
@@ -0,0 +1,23 @@
+#!/bin/sh
+
+# -------------------------------------------------------------
+# Deploy Mumble certificate on Murmur
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# Created: 2016-11-03
+# License: Trivial work, not eligible to copyright
+# -------------------------------------------------------------
+
+: ${JAIL_HOSTNAME='mumble.nasqueron.org'}
+: ${CERT_DIR="/usr/local/etc/letsencrypt/live/$JAIL_HOSTNAME"}
+: ${JAIL_DIR="/usr/local/jails/$JAIL_HOSTNAME"}
+: ${JAIL_ID=`jls | grep $JAIL_HOSTNAME | awk '{print $1}'`}
+
+cp $CERT_DIR/fullchain.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.crt
+cp $CERT_DIR/privkey.pem $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key
+
+# murmur has uid 338
+chown 338:0 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key
+chmod 400 $JAIL_DIR/usr/local/etc/ssl/nasqueron.org/mumble.key
+
+jexec $JAIL_ID service murmur restart
diff --git a/roles/mumble/certificates/init.sls b/roles/mumble/certificates/init.sls
new file mode 100644
index 0000000..e648802
--- /dev/null
+++ b/roles/mumble/certificates/init.sls
@@ -0,0 +1,13 @@
+# -------------------------------------------------------------
+# Salt — Deploy SSL certificate for Mumble server
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# Created: 2016-11-03
+# License: Trivial work, not eligible to copyright
+# -------------------------------------------------------------
+
+mumble_certificates_update_script:
+ file.managed:
+ - name: /usr/local/bin/update-mumble-certificates
+ - source: salt://roles/mumble/certificates/files/update-mumble-certificates
+
File Metadata
Details
Attached
Mime Type
text/x-diff
Expires
Sun, Oct 12, 05:23 (1 d, 8 h)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
3057033
Default Alt Text
(1 KB)
Attached To
Mode
rOPS Nasqueron Operations
Attached
Detach File
Event Timeline
Log In to Comment