forked from Lainports/opnsense-ports
37 lines
1.5 KiB
Bash
37 lines
1.5 KiB
Bash
#!/bin/sh
|
|
|
|
set -e
|
|
|
|
DOMAIN="example.net"
|
|
ACMEDIR="%%PREFIX%%/etc/ssl/acme"
|
|
JAILSDIR="/usr/jails"
|
|
TARGETS="mail http"
|
|
for jail in ${targets}; do
|
|
targetdir="${JAILSDIR}/${jail}/etc/ssl"
|
|
# Check if the certificate has changed
|
|
[[ -z "`diff -rq ${ACMEDIR}/${domain}/fullchain.pem ${targetdir}/certs/${domain}.pem`" ]] && continue
|
|
cp -L "${ACMEDIR}/private/${domain}.pem" "${targetdir}/priv/${domain}.pem"
|
|
cp -L "${ACMEDIR}/${domain}/fullchain.pem" "${targetdir}/certs/${domain}.pem"
|
|
chmod 400 "${targetdir}/priv/${domain}.pem"
|
|
chmod 644 "${targetdir}/certs/${domain}.pem"
|
|
# Restart/-load relevant services
|
|
[[ "${jail}" = "http" ]] && jexec ${jail} service apache24 restart
|
|
[[ "${jail}" = "mail" ]] && jexec ${jail} service smtpd restart
|
|
done
|
|
|
|
# Repeat for other certificates
|
|
#DOMAIN="example.org"
|
|
#TARGETS="mail"
|
|
#for jail in ${targets}; do
|
|
# targetdir="${JAILSDIR}/${jail}/etc/ssl"
|
|
# # Check if the certificate has changed
|
|
# [[ -z "`diff -rq ${ACMEDIR}/${domain}/fullchain.pem ${targetdir}/certs/${domain}.pem`" ]] && continue
|
|
# cp -L "${ACMEDIR}/private/${domain}.pem" "${targetdir}/priv/${domain}.pem"
|
|
# cp -L "${ACMEDIR}/${domain}/fullchain.pem" "${targetdir}/certs/${domain}.pem"
|
|
# chmod 400 "${targetdir}/priv/${domain}.pem"
|
|
# chmod 644 "${targetdir}/certs/${domain}.pem"
|
|
# # Restart/-load relevant services
|
|
# [[ "${jail}" = "http" ]] && jexec ${jail} service apache24 restart
|
|
# [[ "${jail}" = "mail" ]] && jexec ${jail} service smtpd restart
|
|
#done
|
|
|