bero/test
1
0
Fork 0
Code Issues 52 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

Added new dumpcerts to fix restarting services when a new cert is generated, renewed

Browse Source
This commit is contained in:
root 2023-12-15 16:34:45 +00:00
parent 022996a48f
commit af321fe046
1 changed files with 34 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
bin/dumpcerts
View File

@ -13,15 +13,28 @@ fail() {
. /etc/federated
echo -ne "\n* Dumping certs from traefik into /federated/certs.."
echo -ne "\n* Dumping certs from traefik into /federated/certs.new.."
traefik-certs-dumper file --version v2 --source /federated/apps/traefik/data/letsencrypt/acme.json --dest /federated/certs.new &> /dev/null
[ $? -ne 0 ] && fail "Couldn't dump certs from traefik-certs-dumper into certs.new"
echo -ne "done."
traefik-certs-dumper file --version v2 --source /federated/apps/traefik/data/letsencrypt/acme.json --dest /federated/certs &> /dev/null
[ $? -ne 0 ] && fail "Couldn't dump certs from traefik-certs-dumper"
diff /federated/certs.new/certs/$DOMAIN.crt /federated/certs/certs/$DOMAIN.crt &> /dev/null
if [ $? -eq 0 ]; then
echo -ne "\n* The certificates are the same (we are not restarting services)."
else
echo -ne "\n* The certificates are NOT the same (we will restart services)."
MATCH="no"
fi
echo -ne "done.\n"
echo -ne "* Installing certs into /federated/apps that use it.."
echo -ne "\n* Moving certs from /federated/certs.new into /federated/certs.."
cp /federated/certs.new/certs/$DOMAIN.crt /federated/certs/certs/$DOMAIN.crt
[ $? -ne 0 ] && fail "Couldn't move /federated/certs.new to /federated/certs"
cp /federated/certs.new/private/$DOMAIN.key /federated/certs/private/$DOMAIN.key
[ $? -ne 0 ] && fail "Couldn't move /federated/certs.new to /federated/certs"
rm -rf /federated/certs.new
echo -ne "done."
echo -ne "\n* Installing certs into /federated/apps that use it.."
# Install into PostgreSQL container
cp /federated/certs/certs/$DOMAIN.crt /federated/apps/postgresql/data/var/lib/postgresql/server.crt
cp /federated/certs/private/$DOMAIN.key /federated/apps/postgresql/data/var/lib/postgresql/server.key
@ -41,5 +54,19 @@ cp /federated/certs/certs/$DOMAIN.crt /federated/certs/private/$DOMAIN.key /fede
# Install into Matrix container
cp /federated/certs/certs/$DOMAIN.crt /federated/certs/private/$DOMAIN.key /federated/apps/matrix/data/matrix/
chmod 644 /federated/apps/matrix/data/matrix/$DOMAIN.crt /federated/apps/matrix/data/matrix/$DOMAIN.key
echo -ne "done.\n"
echo -ne "done.\n\n"
if [ "$MATCH" = "no" ]; then
echo "\n* Restarting services that use the certificate.."
/federated/bin/stop postgresql
/federated/bin/stop ldap
/federated/bin/stop mail
/federated/bin/stop matrix
/federated/bin/start postgresql
/federated/bin/start ldap
/federated/bin/start mail
/federated/bin/start matrix
echo -ne "done.\n"
fi
echo -ne "\n\n"