More selective pruning of certificate backup directories.

diff --git a/deploy/sshdeploy.sh b/deploy/sshdeploy.sh
index 96eabc7491eac2d385c0d9db64f4659429cd1f12..55d248caa0c945bbbe759142175df63daed63bf1 100644 (file)
--- a/deploy/sshdeploy.sh
+++ b/deploy/sshdeploy.sh
@@ -33,8 +33,8 @@ sshdeploy_deploy() {
   _cfullchain="$5"
   _cmdstr=""
   _homedir='~'
-  _homedir="$_homedir/.acme_ssh_deploy"
-  _backupdir="$_homedir/certs-backup-$(date +%Y%m%d%H%M%S)"
+  _backupprefix="$_homedir/.acme_ssh_deploy/certs-backup"
+  _backupdir="$_backupprefix-$(date +%Y%m%d%H%M%S)"
 
   if [ -f "$DOMAIN_CONF" ]; then
     # shellcheck disable=SC1090
@@ -179,7 +179,7 @@ sshdeploy_deploy() {
   else
     # something to execute.
     # run cleanup on the backup directory, erase all older than 180 days.
-    _cmdstr="find $_homedir/* -type d -mtime +180 2>/dev/null | xargs rm -rf ; $_cmdstr"
+    _cmdstr="find $_backupprefix* -type d -mtime +180 2>/dev/null | xargs rm -rf ; $_cmdstr"
     # Create our backup directory for overwritten cert files.
     _cmdstr="mkdir -p $_backupdir ; $_cmdstr"
     _info "Backup of old certificate files will be placed in remote directory $_backupdir"