update readme
This commit is contained in:
parent
147926112c
commit
f0cd9433de
@ -14,14 +14,12 @@ given a service:
|
||||
* log into firewall, block http for the given service
|
||||
* set permissions and ownership on new keys
|
||||
* perform service specific hooks
|
||||
* jellyfin: generating a pkcs12 key
|
||||
* jellyfin/plex: generate a pkcs12 key and
|
||||
put it in the right place
|
||||
|
||||
All secrets are GPG encrypted and one password prompt allows for script access
|
||||
to all secrets necessary.
|
||||
|
||||
State:
|
||||
|
||||
* Only jellyfin is tested and working
|
||||
* Can only really test when keys come closer to expiring
|
||||
* code is ugly, could be a nice class or something
|
||||
|
||||
* running for all services, no known bugs at this time
|
||||
|
@ -61,7 +61,7 @@ def firewall_mod(state, service, decrypt_pp):
|
||||
log.info(f'env for fw: ssl_service: {service}')
|
||||
log.info(f'cmd to connect to firewall: "{" ".join(cmd)}"')
|
||||
p = pexpect.spawnu(' '.join(cmd))
|
||||
res = p.expect([f"Enter passphrase for key '{router_key}':",
|
||||
res = p.expect([f'Enter passphrase for key "{router_key}":',
|
||||
pexpect.TIMEOUT, pexpect.EOF])
|
||||
if res > 0:
|
||||
sys.exit('Couldnt send decryption key to ssh.')
|
||||
|
Loading…
x
Reference in New Issue
Block a user