Mercurial Hosting > luan
annotate host/renewSsl.sh @ 2073:a70b603f82f5 default tip
nginx minor
| author | Franklin Schmidt <fschmidt@gmail.com> |
|---|---|
| date | Sun, 07 Dec 2025 21:36:08 -0700 |
| parents | b934176dfcf1 |
| children |
| rev | line source |
|---|---|
| 1632 | 1 #!/bin/bash |
| 2072 | 2 set -e |
| 1632 | 3 |
| 2072 | 4 # for now - fschmidt |
| 5 echo 'totally fucked up' | |
| 6 exit 1 | |
| 7 | |
| 2037 | 8 cd "$1" || exit 1 |
| 2048 | 9 |
| 2037 | 10 ROOTPWD=$(pwd) |
| 2048 | 11 KEYFILE="$ROOTPWD/local/tiny_account.key" |
| 2037 | 12 for SITEROOT in "$ROOTPWD"/sites/*; do |
| 2048 | 13 { |
| 14 # Skip if not a directory | |
| 15 [ -d "$SITEROOT" ] || continue | |
| 2037 | 16 |
| 2048 | 17 DOMAIN=$(basename "$SITEROOT") |
| 18 CSRFILE="$SITEROOT/$DOMAIN.csr" | |
| 19 FULLCHAIN="$SITEROOT/fullchain.cer" | |
| 20 CHALLENGEDIR="$SITEROOT/site/.well-known/acme-challenge" | |
| 21 TMPOUT="/tmp/$DOMAIN.crt" | |
| 22 echo "Processing domain: $DOMAIN" | |
| 1632 | 23 |
| 2048 | 24 # local_https.sh does not create a csr file, assume |
| 25 # it is a self-signed local cert if it doesn't exist | |
| 26 if [ ! -f "$CSRFILE" ]; then | |
| 27 echo "CSR file not found, assuming self-signed and skipping." | |
| 28 continue | |
| 29 fi | |
| 30 | |
| 31 mkdir -p "$CHALLENGEDIR" | |
| 1632 | 32 |
|
2061
dd10659fcdb9
Renew ssl monthly instead of daily; Fix renewSsl.sh
Violet7
parents:
2052
diff
changeset
|
33 "$ROOTPWD/acme_tiny" \ |
| 2048 | 34 --account-key "$KEYFILE" \ |
| 35 --csr "$CSRFILE" \ | |
| 36 --acme-dir "$CHALLENGEDIR" \ | |
| 37 > "$TMPOUT" | |
| 2037 | 38 |
| 2048 | 39 # check if exists |
| 40 if [ -f "$FULLCHAIN" ]; then | |
| 41 mv $FULLCHAIN "$FULLCHAIN.old" | |
| 42 fi | |
| 2037 | 43 |
| 2048 | 44 mv "$TMPOUT" "$FULLCHAIN" |
| 45 | |
| 46 echo "Renewed certificate for $DOMAIN" | |
| 47 } || { | |
| 48 echo "Error processing $SITEROOT — skipping." | |
| 49 } | |
| 2037 | 50 done |
| 51 | |
| 2050 | 52 sudo /usr/local/bin/nginx -s reload -c "$(pwd)/local/nginx.conf" |
| 2037 | 53 echo "Nginx reloaded." |