the member's username, keeping a list of the member's clients (in case
all authorizations need to be revoked quickly). The list of client
certificates that have been revoked is stored along with the
-membership roll (in [[file:private/members.yml][=private/members.yml=]] as the value of ~revoked~).
+membership roll (in =private/members.yml= as the value of ~revoked~).
Finally, the institute uses an OpenPGP key to secure sensitive emails
(containing passwords or private keys) to Core.
[[*Accounts][Accounts]]. The account management sub-commands maintain a mapping
associating member "usernames" (Unix account names) with their
records. The mapping is stored among other things in
-[[file:private/members.yml][=private/members.yml=]] as the value associated with the key ~members~.
+=private/members.yml= as the value associated with the key ~members~.
A new member's record in the ~members~ mapping will have the ~status~
key value ~current~. That key gets value ~former~ when the member
The next code block implements the ~new~ sub-command. It adds a new
member to the institute's membership roll. It runs an Ansible
playbook to create the member's Nextcloud user, updates
-[[file:private/members.yml][=private/members.yml=]], and runs the [[file:playbooks/site.yml][=site.yml=]] playbook. The site
+=private/members.yml=, and runs the [[file:playbooks/site.yml][=site.yml=]] playbook. The site
playbook (re)creates the member's accounts on Core and Front,
(re)installs the member's personal homepage on Front, and the member's
Fetchmail service on Core. All services are configured with an
pass~ command. In either case, the administrator needs to update the
membership roll, and so receives an encrypted email, which gets piped
into ~./inst pass~. This command decrypts the message, parses the
-(YAML) content, updates [[file:private/members.yml][=private/members.yml=]], and runs the full
+(YAML) content, updates =private/members.yml=, and runs the full
Ansible [[file:playbooks/site.yml][=site.yml=]] playbook to update the servers. If all goes well a
message is sent to ~member@core~.
*** Less Aggressive Pass Command
The following code block implements the ~./inst pass~ command, used by
-the administrator to update [[file:private/members.yml][=private/members.yml=]] before running
+the administrator to update =private/members.yml= before running
[[file:playbooks/site.yml][=playbooks/site.yml=]] and emailing the concerned member.
#+CAPTION: [[file:inst][=inst=]]