summaryrefslogtreecommitdiff
path: root/scripts/kvmd-gencert
blob: ddbb2fa2660ebbfa10bb20ef979238ad7eafda19 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
#!/bin/bash
set -x
set -e

if [ `whoami` != root ]; then
	echo "Only root can do that"
	exit 1
fi

mkdir -p /etc/kvmd/nginx/ssl
cd /etc/kvmd/nginx/ssl

openssl req -new -x509 -nodes -newkey rsa:4096 -keyout server.key -out server.crt -days 3650 \
	-subj "/C=RU/ST=Moscow/L=Moscow/O=Pi-KVM/OU=Pi-KVM/CN=localhost"
chown -R root:http /etc/kvmd/nginx/ssl

chmod 400 server.key
chmod 444 server.crt
chmod 750 /etc/kvmd/nginx/ssl