Skip to content
Snippets Groups Projects
Verified Commit c3f8c680 authored by David Beniamine's avatar David Beniamine
Browse files

Use certbot standalone + use domain name from MODS

parent f21b2282
Branches
No related tags found
No related merge requests found
...@@ -21,21 +21,14 @@ ...@@ -21,21 +21,14 @@
apt-get update && apt-get install certbot apt-get update && apt-get install certbot
DOMAINS="dolibarr.${DOMAIN},nextcloud.${DOMAIN},tetras-back.${DOMAIN}" DOMAINS="$(echo `echo ${MODS} | tr ' ' '\n' | grep -v 'Base\|MySQL'` \
ARGS="--hsts --must-staple --email=${SERVER_ADMIN} --domains=${DOMAINS} | tr [:upper:] [:lower:] | sed "s/ /.${DOMAIN},/g" ).${DOMAIN}"
--text --agree-tos" ARGS="--hsts --email=${SERVER_ADMIN} --domains=${DOMAINS} --text --agree-tos"
line="0 1 * * `date +%u` /usr/bin/certbot renew --force-renewal > /var/log/certbot.log 2>&1" line="0 1 * * `date +%u` /usr/bin/certbot renew > /var/log/certbot.log \
if [ "${WEB_SERVER}" == "apache2" ] 2>&1 > /dev/null"
then OPTS="certonly --authenticator standalone"
additional_packages="python-certbot-apache" precmd="systemctl stop ${WEB_SERVER}"
OPTS="run --apache" postcmd="systemctl start ${WEB_SERVER}"
line+="${RENEW}"
else
OPTS="certonly --standalone"
precmd="systemctl stop nginx"
postcmd="systemctl start nginx"
EXTRA_ARGS="--pre-hook \"$precmd\" --post-hook \"$postcmd\""
fi
DEBIAN_FRONTEND='noninteractive' apt-get -qq install \ DEBIAN_FRONTEND='noninteractive' apt-get -qq install \
certbot ${additional_packages} certbot ${additional_packages}
...@@ -43,5 +36,12 @@ DEBIAN_FRONTEND='noninteractive' apt-get -qq install \ ...@@ -43,5 +36,12 @@ DEBIAN_FRONTEND='noninteractive' apt-get -qq install \
$precmd $precmd
/usr/bin/certbot ${OPTS} ${ARGS} /usr/bin/certbot ${OPTS} ${ARGS}
$postcmd $postcmd
line+=" ${EXTRA_ARGS} > /dev/null"
FIRST_DOMAIN=`echo $DOMAINS | cut -f 1 -d ,`
LIVE_DIR="/etc/letsencrypt/live/${FIRST_DOMAIN}"
/usr/bin/certbot install --cert-path ${LIVE_DIR}/cert.pem \
--key-path ${LIVE_DIR}/privkey.pem \
--fullchain-path ${LIVE_DIR}/fullchain.pem
(crontab -l; echo "${line}") | crontab - (crontab -l; echo "${line}") | crontab -
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment