domains/sourcephile.fr/nebula/keygen.sh

   1 #!/usr/bin/env bash
   2 # shellcheck disable=SC2046
   3 dir=${0%/*}
   4 set -eux
   5 host=$1
   6
   7 nebula-cert keygen -out-key "$dir/$host".key -out-pub "$dir/$host".pub
   8 gpg --encrypt $(printf '-r %s' $(cat hosts/"$host"/.gpg-id)) \
   9   -o hosts/"$host"/nebula/sourcephile.fr/"$host".key.gpg \
  10   "$dir/$host".key
  11 shred -fu "$dir/$host".key