Add updatecerts.sh from the server so we don't lose it
This commit is contained in:
parent
1f604c7dfb
commit
cf4a0f7af6
28
updatecerts.sh
Normal file
28
updatecerts.sh
Normal file
|
@ -0,0 +1,28 @@
|
||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
echo RENEWED_DOMAINS=$RENEWED_DOMAINS
|
||||||
|
if [[ $RENEWED_DOMAINS = *xmpp.dk* ]]
|
||||||
|
then
|
||||||
|
echo "Running certificate post-update script"
|
||||||
|
cp /etc/letsencrypt/live/xmpp.dk/* /etc/prosody/certs
|
||||||
|
chown prosody:prosody /etc/prosody/certs/*
|
||||||
|
|
||||||
|
SHA256=$(openssl x509 -noout -fingerprint -sha256 -inform pem -in /etc/letsencrypt/live/xmpp.dk/cert.pem | cut -c20-)
|
||||||
|
SHA1=$(openssl x509 -noout -fingerprint -sha1 -inform pem -in /etc/letsencrypt/live/xmpp.dk/cert.pem | cut -c18-)
|
||||||
|
EXPIRES=$(openssl x509 -noout -enddate -inform pem -in /etc/letsencrypt/live/xmpp.dk/cert.pem | cut -c10-)
|
||||||
|
|
||||||
|
rm -fr /tmp/xmpp.dk
|
||||||
|
git clone /home/graffen/website.git /tmp/xmpp.dk
|
||||||
|
sed -i "s/sha-256:.*/sha-256: $SHA256/" /tmp/xmpp.dk/_config.yml
|
||||||
|
sed -i "s/sha-1:.*/sha-1: $SHA1/" /tmp/xmpp.dk/_config.yml
|
||||||
|
sed -i "s/expiry:.*/expiry: $EXPIRES/" /tmp/xmpp.dk/_config.yml
|
||||||
|
#rm -fr /tmp/xmpp.dk
|
||||||
|
|
||||||
|
git -C /tmp/xmpp.dk/ add _config.yml
|
||||||
|
git -C /tmp/xmpp.dk/ commit -m"Automated update of certificate info" 2&>1 /dev/null
|
||||||
|
git -C /tmp/xmpp.dk/ push
|
||||||
|
|
||||||
|
systemctl reload prosody
|
||||||
|
systemctl reload nginx
|
||||||
|
fi
|
||||||
|
|
Loading…
Reference in a new issue