golderweb
46a81e2feb
Replace all hardcoded occurences of letsencrypt config dir path with variable to reduce possibility of future mistakes.
26 lines
828 B
Bash
Executable File
26 lines
828 B
Bash
Executable File
#!/bin/bash
|
|
PATH=/usr/local/bin:/bin:/usr/bin:/usr/local/sbin:/usr/sbin:/sbin
|
|
|
|
LECONFIGDIR="~/.config/letsencrypt"
|
|
|
|
# Get all existing inifiles matching namescheme cli-${domain}.ini
|
|
for inifile in "${LECONFIGDIR}/cli-*.ini"; do
|
|
|
|
# Strip domain out of filename
|
|
domain=${inifile:$(( ${#LECONFIGDIR} + 5 )):-4}
|
|
|
|
# sleep for a random time so not all certificates get renewed at the same time
|
|
sleep $(expr $RANDOM % 600)
|
|
|
|
# Check validity of cert for domain
|
|
openssl x509 -checkend $(( 21 * 86400 )) -in "${LECONFIGDIR}/live/${domain}/cert.pem" > /dev/null
|
|
|
|
if [ \$? != 0 ]; then
|
|
# run let's encrypt
|
|
letsencrypt certonly -c "${LECONFIGDIR}/letsencrypt/cli-${domain}.ini"
|
|
# import certificate
|
|
uberspace-add-certificate -k "${LECONFIGDIR}/live/${domain}/privkey.pem" -c "${LECONFIGDIR}/live/${domain}/cert.pem"
|
|
fi
|
|
|
|
done
|