|
1632
|
1 #!/bin/bash
|
|
|
2
|
|
2037
|
3 cd "$1" || exit 1
|
|
|
4 ROOTPWD=$(pwd)
|
|
1632
|
5
|
|
2037
|
6 for SITEROOT in "$ROOTPWD"/sites/*; do
|
|
|
7 # Skip if not a directory
|
|
|
8 [ -d "$SITEROOT" ] || continue
|
|
|
9
|
|
|
10 DOMAIN=$(basename "$SITEROOT")
|
|
|
11 echo "Processing domain: $DOMAIN"
|
|
|
12
|
|
|
13 mkdir -p "$SITEROOT/site/.well-known/acme-challenge"
|
|
1632
|
14
|
|
2037
|
15 python3 "$ROOTPWD/acme_tiny.py" \
|
|
|
16 --account-key "$ROOTPWD/local/tiny_account.key" \
|
|
|
17 --csr "$SITEROOT/$DOMAIN.csr" \
|
|
|
18 --acme-dir "$SITEROOT/site/.well-known/acme-challenge" \
|
|
|
19 > "/tmp/$DOMAIN.crt"
|
|
1632
|
20
|
|
2037
|
21 # check if exists
|
|
|
22 if [ -f "$SITEROOT/fullchain.cer" ]; then
|
|
|
23 mv "$SITEROOT/fullchain.cer" "$SITEROOT/fullchain.cer.old"
|
|
|
24 fi
|
|
|
25
|
|
|
26 mv "/tmp/$DOMAIN.crt" "$SITEROOT/fullchain.cer"
|
|
|
27
|
|
|
28 echo "Renewed certificate for $DOMAIN"
|
|
|
29 done
|
|
|
30
|
|
|
31 sudo /usr/local/bin/nginx -s reload
|
|
|
32 echo "Nginx reloaded."
|