consolidate samba passdb into system/ + add selinux step to runbook

2026-04-18 08:53:18 -04:00
parent 439e718206
commit a2b90e4dfe
5 changed files with 25 additions and 11 deletions
@@ -17,6 +17,12 @@ done < "$REPO/system/tracked-configs"

 sed -i 's/^password .*/password REDACTED/' "$REPO/system/msmtprc"

+# Mirror samba's binary passdb files into the repo so backup.sh's standard
+# rsync of /opt/argento/ picks them up. Gitignored — credential hashes don't
+# belong in version control, but they DO need to ride along on the USB backup.
+install -d -m 700 "$REPO/system/samba-private"
+rsync -a --delete /var/lib/samba/private/ "$REPO/system/samba-private/"
+
 # Sync root crontab
 crontab -l > "$REPO/system/root-crontab" 2>/dev/null || true