rod.wright/LetsencryptCertUpdater
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added code to populate the TLS certs on iRedMail servers

Browse Source
This commit is contained in:
Rod Wright
2026-07-19 16:32:31 -04:00
parent b6ed710d8b
commit 36c07a46bc
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
usr/local/bin/update-letsencrypt-certs
View File

@@ -9,18 +9,28 @@
cert_host="portal.thermionic.net" cert_host="portal.thermionic.net"
# Set which http server to restart # Set which http server to restart
#http_server="nginx" http_server="nginx"
#http_server="apache2" #http_server="apache2"
http_server="pveproxy" #http_server="pveproxy"
# Pull certs from the certifiate host
if rsync -aL --info=stats2 root@$cert_host:/etc/letsencrypt/live/thermionic.net/ /etc/ssl/thermionic.net/ |grep -q "Number of regular files transferred: 0"; then http_server_restart=false; else http_server_restart=true; fi if rsync -aL --info=stats2 root@$cert_host:/etc/letsencrypt/live/thermionic.net/ /etc/ssl/thermionic.net/ |grep -q "Number of regular files transferred: 0"; then http_server_restart=false; else http_server_restart=true; fi
#Certs go in a non-standard place for a proxmox server
if [ "$http_server" = "pveproxy" ] if [ "$http_server" = "pveproxy" ]
then then
cp -f /etc/ssl/thermionic.net/fullchain.pem /etc/pve/local/pveproxy-ssl.pem cp -f /etc/ssl/thermionic.net/fullchain.pem /etc/pve/local/pveproxy-ssl.pem
cp -f /etc/ssl/thermionic.net/privkey.pem /etc/pve/local/pveproxy-ssl.key cp -f /etc/ssl/thermionic.net/privkey.pem /etc/pve/local/pveproxy-ssl.key
fi fi
# Populate additional TLS cers for iRedMail server
if [ -e "/etc/ssl/private/iRedMail.key" ]
then
cp -f /etc/ssl/thermionic.net/fullchain.pem /etc/ssl/certs/iRedMail.crt
cp -f /etc/ssl/thermionic.net/privkey.pem /etc/ssl/private/iRedMail.key
fi
# Restart if required
if $http_server_restart; then if $http_server_restart; then
echo "New certs downloaded. Restarting $http_server." echo "New certs downloaded. Restarting $http_server."
systemctl restart $http_server systemctl restart $http_server