mirror of
https://github.com/aljazceru/addons.git
synced 2025-12-17 21:24:20 +01:00
69 lines
3.4 KiB
Bash
Executable File
69 lines
3.4 KiB
Bash
Executable File
#!/usr/bin/env bashio
|
|
|
|
EMAIL=$(bashio::config 'email')
|
|
DOMAINS=$(bashio::config 'domains')
|
|
KEYFILE=$(bashio::config 'keyfile')
|
|
CERTFILE=$(bashio::config 'certfile')
|
|
CHALLENGE=$(bashio::config 'challenge')
|
|
DNS_PROVIDER=$(bashio::config 'dns.provider')
|
|
|
|
CERT_DIR=/data/letsencrypt
|
|
WORK_DIR=/data/workdir
|
|
|
|
mkdir -p "$WORK_DIR"
|
|
mkdir -p "$CERT_DIR"
|
|
mkdir -p "/ssl"
|
|
chmod +x /run.sh
|
|
touch /data/dnsapikey
|
|
|
|
echo -e "dns_cloudflare_email = $(bashio::config 'dns.cloudflare_email')\n" \
|
|
"dns_cloudflare_api_key = $(bashio::config 'dns.cloudflare_api_key')\n" \
|
|
"dns_cloudxns_api_key = $(bashio::config 'dns.cloudxns_api_key')\n" \
|
|
"dns_cloudxns_secret_key = $(bashio::config 'dns.cloudxns_secret_key')\n" \
|
|
"dns_digitalocean_token = $(bashio::config 'dns.digitalocean_token')\n" \
|
|
"dns_dnsimple_token = $(bashio::config 'dns.dnsimple_token')\n" \
|
|
"dns_dnsmadeeasy_api_key = $(bashio::config 'dns.dnsmadeeasy_api_key')\n" \
|
|
"dns_dnsmadeeasy_secret_key = $(bashio::config 'dns.dnsmadeeasy_secret_key')\n" \
|
|
"dns_gehirn_api_token = $(bashio::config 'dns.gehirn_api_token')\n" \
|
|
"dns_gehirn_api_secret = $(bashio::config 'dns.gehirn_api_secret')\n" \
|
|
"dns_linode_key = $(bashio::config 'dns.linode_key')\n" \
|
|
"dns_linode_version = $(bashio::config 'dns.linode_version')\n" \
|
|
"dns_luadns_email = $(bashio::config 'dns.luadns_email')\n" \
|
|
"dns_luadns_token = $(bashio::config 'dns.luadns_token')\n" \
|
|
"dns_nsone_api_key = $(bashio::config 'dns.nsone_api_key')\n" \
|
|
"dns_ovh_endpoint = $(bashio::config 'dns.ovh_endpoint')\n" \
|
|
"dns_ovh_application_key = $(bashio::config 'dns.ovh_application_key')\n" \
|
|
"dns_ovh_application_secret = $(bashio::config 'dns.ovh_application_secret')\n" \
|
|
"dns_ovh_consumer_key = $(bashio::config 'dns.ovh_consumer_key')\n" \
|
|
"dns_rfc2136_server = $(bashio::config 'dns.rfc2136_server')\n" \
|
|
"dns_rfc2136_port = $(bashio::config 'dns.rfc2136_port')\n" \
|
|
"dns_rfc2136_name = $(bashio::config 'dns.rfc2136_name')\n" \
|
|
"dns_rfc2136_secret = $(bashio::config 'dns.rfc2136_secret')\n" \
|
|
"dns_rfc2136_algorithm = $(bashio::config 'dns.rfc2136_algorithm')\n" \
|
|
"aws_access_key_id = $(bashio::config 'dns.aws_access_key_id')\n" \
|
|
"aws_secret_access_key = $(bashio::config 'dns.aws_secret_access_key')\n" \
|
|
"dns_sakuracloud_api_token = $(bashio::config 'dns.sakuracloud_api_token')\n" \
|
|
"dns_sakuracloud_api_secret = $(bashio::config 'dns.sakuracloud_api_secret')" > /data/dnsapikey
|
|
chmod 600 /data/dnsapikey
|
|
|
|
# Generate new certs
|
|
if [ ! -d "$CERT_DIR/live" ]; then
|
|
DOMAIN_ARR=()
|
|
for line in $DOMAINS; do
|
|
DOMAIN_ARR+=(-d "$line")
|
|
done
|
|
|
|
echo "$DOMAINS" > /data/domains.gen
|
|
if [ "$CHALLENGE" == "dns" ]; then
|
|
certbot certonly --non-interactive --config-dir "$CERT_DIR" --work-dir "$WORK_DIR" "--$DNS_PROVIDER" "--${DNS_PROVIDER}-credentials" "/data/dnsapikey" --email "$EMAIL" --agree-tos --config-dir "$CERT_DIR" --work-dir "$WORK_DIR" --preferred-challenges "$CHALLENGE" "${DOMAIN_ARR[@]}"
|
|
else
|
|
certbot certonly --non-interactive --standalone --email "$EMAIL" --agree-tos --config-dir "$CERT_DIR" --work-dir "$WORK_DIR" --preferred-challenges "$CHALLENGE" "${DOMAIN_ARR[@]}"
|
|
fi
|
|
else
|
|
certbot renew --non-interactive --config-dir "$CERT_DIR" --work-dir "$WORK_DIR" --preferred-challenges "$CHALLENGE"
|
|
fi
|
|
|
|
# copy certs to store
|
|
cp "$CERT_DIR"/live/*/privkey.pem "/ssl/$KEYFILE"
|
|
cp "$CERT_DIR"/live/*/fullchain.pem "/ssl/$CERTFILE"
|