New script and stuff for fetching ejabberd certs from LE
authorAlex Dehnert <alex@dehnerts.com>
Wed, 11 Jan 2017 04:16:03 +0000 (23:16 -0500)
committerAlex Dehnert <alex@dehnerts.com>
Wed, 11 Jan 2017 04:16:03 +0000 (23:16 -0500)
fullchain.pem [new symlink]
privkey.pem [new symlink]
update-cert.sh [new file with mode: 0755]

diff --git a/fullchain.pem b/fullchain.pem
new file mode 120000 (symlink)
index 0000000..114e3f1
--- /dev/null
@@ -0,0 +1 @@
+../letsencrypt/live/jabber.dehnerts.com/fullchain.pem
\ No newline at end of file
diff --git a/privkey.pem b/privkey.pem
new file mode 120000 (symlink)
index 0000000..3583a99
--- /dev/null
@@ -0,0 +1 @@
+../letsencrypt/live/jabber.dehnerts.com/privkey.pem
\ No newline at end of file
diff --git a/update-cert.sh b/update-cert.sh
new file mode 100755 (executable)
index 0000000..3625dee
--- /dev/null
@@ -0,0 +1,8 @@
+#!/bin/sh
+
+set -euf
+
+umask 0006
+cat privkey.pem fullchain.pem > ejabberd.pem
+chgrp ejabberd ejabberd.pem
+chmod u=rw,g=r,o-rwx ejabberd.pem