+if [ -e "$HOST/ssh-rsa-shadow" ]; then
+ ln -sf $HOST/ssh-rsa-shadow .
+ ln -sf `pwd -P`/ssh-rsa-shadow /etc/ssh
+else
+ rm -f ssh-rsa-shadow /etc/ssh/ssh-rsa-shadow
+fi
+ln -sf $HOST/ssh_known_hosts .
+ln -sf `pwd -P`/ssh_known_hosts /etc/ssh
+
+if [ -e ${HOST}/ssh-keys.tar.gz ]; then
+ export TMPDIR='/tmp/'
+ tempdir=$(mktemp -d)
+ tar -C "$tempdir" -xf ${HOST}/ssh-keys.tar.gz
+ mkdir -p userkeys
+ chmod 755 $tempdir
+ rsync -a --delete-after $tempdir/ userkeys/
+fi
+
+if [ -e ${HOST}/web-passwords ]; then
+ chown root:www-data ${HOST}/web-passwords
+ chmod 0640 ${HOST}/web-passwords
+fi
+
+if [ -d "/etc/exim4" -a -e "$HOST/bsmtp" ]; then
+ if perl -e 'exit !((stat "/etc/exim4/bsmtp")[9] < time()-3600)'; then
+ cp "$HOST/bsmtp" /etc/exim4/bsmtp
+ fi
+fi
+if [ -d "/etc/postfix" -a -f "$HOST/forward-alias" ]; then
+ sed -e "s/:/@$EMAILAPPEND/" $HOST/forward-alias > /etc/postfix/debian
+ /usr/sbin/postmap hash:/etc/postfix/debian < /etc/postfix/debian || true
+fi
+
+rebuild_zones=0
+if [ -e /var/lib/misc/thishost/dns-sshfp ]; then
+ if ! cmp -s /var/lib/misc/thishost/dns-sshfp "$tempfile"; then
+ rebuild_zones=1
+ fi
+fi
+
+if [ -e /var/lib/misc/thishost/dns-zone ]; then
+ if ! cmp -s /var/lib/misc/thishost/dns-zone "$tempfile2"; then
+ rebuild_zones=1
+ fi
+fi
+
+if [ "${rebuild_zones}" -gt 0 ]; then
+ sudo -u dnsadm /srv/dns.debian.org/bin/update
+fi
+
+if [ -d "/etc/freeradius" -a -e "$HOST/rtc-passwords" ]; then
+ if ! cmp -s "$HOST/rtc-passwords" /var/local/rtc-passwords.freerad; then
+ install -o freerad -g freerad -m 400 "$HOST/rtc-passwords" /var/local/rtc-passwords.freerad
+ service freeradius reload
+ fi
+fi
+if [ -d "/etc/reTurn" -a -e "$HOST/rtc-passwords" ]; then
+ if ! cmp -s "$HOST/rtc-passwords" /var/local/rtc-passwords.return; then
+ install -o return -g return -m 400 "$HOST/rtc-passwords" /var/local/rtc-passwords.return
+ service resiprocate-turn-server reload
+ fi
+fi
+if [ -d "/etc/prosody" -a -e "$HOST/rtc-passwords" ]; then
+ if ! cmp -s "$HOST/rtc-passwords" /var/local/rtc-passwords.prosody; then
+ install -o prosody -g prosody -m 400 "$HOST/rtc-passwords" /var/local/rtc-passwords.prosody
+ service prosody reload
+ fi
+fi