safebox/letsencrypt
7
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Refactor start.letsencrypt.sh to improve domain handling and installation checks
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse Source
This commit is contained in:
gyurix
2025-03-29 22:50:01 +01:00
parent 3f2d75c086
commit 7274cab64f
1 changed files with 31 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
start.letsencrypt.sh
View File

@@ -54,7 +54,10 @@ create_json() {
start_letsencrypt() {
cd /root
curl https://get.acme.sh | sh -s email=$EMAIL
if [ "$LETSENCRYPT_INSTALLED" == "true" ]; then
curl https://get.acme.sh | sh -s email=$EMAIL
LETSENCRYPT_INSTALLED=true
fi
cd /root/.acme.sh
chmod a+x ./acme.sh
RESPONSE=$(./acme.sh $L_S $EK $EHK --issue --standalone --keylength 4096 -d $DOMAIN --cert-file /etc/ssl/keys/$DOMAIN/cert.pem --key-file /etc/ssl/keys/$DOMAIN/key.pem --fullchain-file /etc/ssl/keys/$DOMAIN/fullchain.pem >$LOG_FILE)
@@ -106,7 +109,9 @@ check_new_cert() {
fi
}
LETSENCRYPT_FILE=$(find /etc/ssl/keys/ -type f -name letsencrypt)
LETSENCRYPT_FILES=$(find /etc/ssl/keys/ -type f -name letsencrypt)
echo "letsencrypt files exist"
if [ "$DOMAIN" != "localhost" ]; then
if [ ! -f $LETSENCRYPT_OUTPUT ]; then
install -m 664 -g 65534 /dev/null $LETSENCRYPT_OUTPUT
@@ -114,29 +119,42 @@ if [ "$DOMAIN" != "localhost" ]; then
fi
if [ "$DOMAIN" != "" ]; then
ORIGINAL=$(openssl x509 -in /etc/ssl/keys/$DOMAIN/fullchain.pem -fingerprint -noout)
echo "DOMAIN: $DOMAIN"
echo "domain exists"
ORIGINAL=$(openssl x509 -in /acme.sh/$DOMAIN/fullchain.pem -fingerprint -noout)
if [ "$DOMAIN" != "localhost" ]; then
start_letsencrypt
check_new_cert
fi
elif [ -n "$LETSENCRYPT_FILE" ]; then
DOMAINS=$(jq -r .DOMAIN $LETSENCRYPT_FILE)
for DOMAIN in $(echo $DOMAINS); do
ORIGINAL=$(openssl x509 -in /etc/ssl/keys/$DOMAIN/fullchain.pem -fingerprint -noout)
start_letsencrypt $DOMAIN
check_new_cert
elif [ -n "$LETSENCRYPT_FILES" ]; then
for LETSENCRYPT_FILE in $(echo $LETSENCRYPT_FILES); do
DOMAIN=$(jq -r .DOMAIN $LETSENCRYPT_FILE)
echo "DOMAIN: $DOMAIN"
for DOMAIN in $(echo $DOMAIN); do
ORIGINAL=$(openssl x509 -in /acme.sh/$DOMAIN/fullchain.pem -fingerprint -noout)
start_letsencrypt $DOMAIN
check_new_cert
DOMAIN=""
done
done
else
cd /domains
for i in $(ls); do
DOMAIN=$(jq -r .DOMAIN $i)
DOMAIN_FILE=""
echo "no any new created domain exists try renew all"
for D in $(ls /domains); do
echo "D: $D"
DOMAIN_FILE=$(basename $D)
echo "DOMAIN_FILE: $DOMAIN_FILE"
DOMAIN=$(jq -r .DOMAIN $DOMAIN_FILE)
echo "DOMAIN: $DOMAIN"
if [ "$DOMAIN" != "localhost" ]; then
ORIGINAL=$(openssl x509 -in /etc/ssl/keys/$DOMAIN/fullchain.pem -fingerprint -noout)
ORIGINAL=$(openssl x509 -in /acme.sh/$DOMAIN/fullchain.pem -fingerprint -noout)
start_letsencrypt $DOMAIN
check_new_cert
fi
DOMAIN=""
DOMAIN_FILE=""
done
fi
fi