summaryrefslogtreecommitdiff
path: root/scripts/kvmd-certbot
diff options
context:
space:
mode:
authorMaxim Devaev <[email protected]>2022-06-24 17:55:38 +0300
committerMaxim Devaev <[email protected]>2022-06-24 17:55:38 +0300
commit094106519a3202c89594ebdff4235ae38bdc41df (patch)
tree6cefc462519871731563be35744b7d6edb45c5c5 /scripts/kvmd-certbot
parenta693b52bf0c5386deb363da33eca7ddc737f7c0e (diff)
fixed permissions
Diffstat (limited to 'scripts/kvmd-certbot')
-rwxr-xr-xscripts/kvmd-certbot2
1 files changed, 2 insertions, 0 deletions
diff --git a/scripts/kvmd-certbot b/scripts/kvmd-certbot
index 937a6fb0..72adb8e2 100755
--- a/scripts/kvmd-certbot
+++ b/scripts/kvmd-certbot
@@ -62,6 +62,7 @@ if [ "$1" == "renew" ]; then
rm -rf '$new'
cp -a '$tmp' '$new'
rm '$new/updated'
+ chmod 750 '$new/config/'{archive,live}
chmod 640 '$new'/config/archive/*/privkey*.pem
sed -s -i -e 's| = $tmp/| = $cur/|g' '$new/config/renewal/'*
sync
@@ -91,6 +92,7 @@ else
--webroot-path="$web" \
--deploy-hook="/usr/bin/bash -c '
set -ex
+ chmod 750 '$cur/config/'{archive,live}
cd \"\$RENEWED_LINEAGE\"
chmod 640 privkey.pem
ln -s fullchain.pem server.crt