mirror of
https://github.com/aljazceru/addons.git
synced 2025-12-18 05:34:20 +01:00
34 lines
955 B
Bash
34 lines
955 B
Bash
#!/bin/bash
|
|
set -e
|
|
|
|
CERT_DIR=/data/letsencrypt
|
|
WORK_DIR=/data/workdir
|
|
CONFIG_PATH=/data/options.json
|
|
|
|
EMAIL=$(jq --raw-output ".email" $CONFIG_PATH)
|
|
DOMAINS=$(jq --raw-output ".domains[]" $CONFIG_PATH)
|
|
KEYFILE=$(jq --raw-output ".keyfile" $CONFIG_PATH)
|
|
CERTFILE=$(jq --raw-output ".certfile" $CONFIG_PATH)
|
|
|
|
# Generate new certs
|
|
if [ ! -d "$CERT_DIR" ]; then
|
|
for line in $DOMAINS; do
|
|
if [ -z "$DOMAIN_ARG" ]; then
|
|
DOMAIN_ARG="-d $line"
|
|
else
|
|
DOMAIN_ARG="$DOMAIN_ARG -d $line"
|
|
fi
|
|
done
|
|
|
|
echo "$DOMAINS" > /data/domains.gen
|
|
certbot certonly --non-interactive --standalone --email "$EMAIL" --agree-tos --config-dir "$CERT_DIR" --work-dir "$WORK_DIR" "$DOMAIN_ARG"
|
|
|
|
# Renew certs
|
|
else
|
|
certbot renew --non-interactive --config-dir "$CERT_DIR" --work-dir "$WORK_DIR"
|
|
fi
|
|
|
|
# copy certs to store
|
|
cp "$CERT_DIR"/live/*/privkey.pem "/ssl/$KEYFILE"
|
|
cp "$CERT_DIR"/live/*/fullchain.pem "/ssl/$CERTFILE"
|