fixed permissions again

This commit is contained in:
Maxim Devaev 2022-06-24 18:25:08 +03:00
parent 9e6edd0cd7
commit bd5676222b
2 changed files with 9 additions and 4 deletions

View File

@ -34,9 +34,14 @@ post_upgrade() {
for target in nginx vnc; do for target in nginx vnc; do
chown root:root /etc/kvmd/$target/ssl chown root:root /etc/kvmd/$target/ssl
chown root:kvmd-$target /etc/kvmd/$target/ssl/* if [ -f /etc/kvmd/$target/ssl/server.key ]; then
chmod 440 /etc/kvmd/$target/ssl/server.key chown root:kvmd-$target /etc/kvmd/$target/ssl/server.key
chmod 444 /etc/kvmd/$target/ssl/server.crt chmod 440 /etc/kvmd/$target/ssl/server.key
fi
if [ -f /etc/kvmd/$target/ssl/server.crt ]; then
chown root:kvmd-$target /etc/kvmd/$target/ssl/server.crt
chmod 444 /etc/kvmd/$target/ssl/server.crt
fi
done done
echo "==> Patching configs ..." echo "==> Patching configs ..."

View File

@ -62,7 +62,7 @@ if [ "$1" == "renew" ]; then
rm -rf '$new' rm -rf '$new'
cp -a '$tmp' '$new' cp -a '$tmp' '$new'
rm '$new/updated' rm '$new/updated'
chmod 750 '$new/config/'{archive,live} chmod 755 '$new/config/'{archive,live}
chmod 640 '$new'/config/archive/*/privkey*.pem chmod 640 '$new'/config/archive/*/privkey*.pem
sed -s -i -e 's| = $tmp/| = $cur/|g' '$new/config/renewal/'* sed -s -i -e 's| = $tmp/| = $cur/|g' '$new/config/renewal/'*
sync sync