envs
/
ops
mirror of https://git.envs.net/envs/ops.git
1
0
Fork 0
Code Releases Activity

Merge branch 'master' of git.envs.net:envs/ops

This commit is contained in:
creme 2020-02-16 12:49:13 +01:00
parent b96786bb16 d083966884
commit 83add53af8
Signed by: creme
GPG Key ID: C147C3B7FBDF08D0
2 changed files with 10 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
etc/etc/sudoers
View File

@ -15,18 +15,20 @@ Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/b
# User alias specification
# Cmnd alias specification
Cmnd_Alias EXCLUDE=!/sbin/halt, !/bin/rm -rf /
#
Cmnd_Alias THELOUNGE=/srv/thelounge/.yarn/bin/thelounge add *
#Cmnd_Alias TOOT=/usr/bin/toot post *
# User privilege specification
root ALL=(ALL:ALL) ALL
services ALL=(ALL:ALL) NOPASSWD:ALL
root ALL=(ALL:ALL) ALL,EXCLUDE
services ALL=(ALL:ALL) NOPASSWD: ALL,EXCLUDE
# Allow members of group sudo to execute any command
%sudo ALL=(ALL:ALL) ALL
%sudo ALL=(ALL:ALL) NOPASSWD: ALL,EXCLUDE
%envs ALL=(thelounge) NOPASSWD: THELOUNGE
#%envs ALL=(services) NOPASSWD: TOOT
%envs ALL=(thelounge) NOPASSWD: THELOUNGE
#%envs ALL=(services) NOPASSWD: TOOT
# See sudoers(5) for more information on "#include" directives:

6
etc/letsencrypt/renewal-hooks/deploy/envs.sh
View File

@ -45,7 +45,7 @@ for domain in $RENEWED_DOMAINS; do
# privatebin
lxc-attach -n pb -- bash -c "systemctl restart apache2"
;;
;;
envs.sh)
daemon_cert_root=/opt/lxc_ssl/envs.sh
@ -56,7 +56,7 @@ for domain in $RENEWED_DOMAINS; do
cat /etc/ssl/certs/envs_dhparam.pem > "$daemon_cert_root/envs_dhparam.pem"
# 0x0 / fiche
lxc-attach -n null -- bash -c "systemctl reload nginx"
;;
;;
znc.envs.net)
daemon_cert_root=/srv/znc/.znc
@ -67,7 +67,7 @@ for domain in $RENEWED_DOMAINS; do
chown znc "$daemon_cert_root/znc.pem"
chmod 600 "$daemon_cert_root/znc.pem"
systemctl restart znc
;;
;;
esac
done