diff options
author | Jakob Odersky <jakob@odersky.com> | 2017-12-26 12:53:02 +0100 |
---|---|---|
committer | Jakob Odersky <jakob@odersky.com> | 2017-12-26 12:53:02 +0100 |
commit | 86ce9c1e65b47452f821375cfe4f1a4c8df83ddf (patch) | |
tree | 165b128ffa7e1614f29c0944f79514ca7ea0c0d1 /issue-certs-nginx | |
download | nginx-letsencrypt-86ce9c1e65b47452f821375cfe4f1a4c8df83ddf.tar.gz nginx-letsencrypt-86ce9c1e65b47452f821375cfe4f1a4c8df83ddf.tar.bz2 nginx-letsencrypt-86ce9c1e65b47452f821375cfe4f1a4c8df83ddf.zip |
Initial commit
Diffstat (limited to 'issue-certs-nginx')
-rwxr-xr-x | issue-certs-nginx | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/issue-certs-nginx b/issue-certs-nginx new file mode 100755 index 0000000..5db460a --- /dev/null +++ b/issue-certs-nginx @@ -0,0 +1,30 @@ +#!/bin/sh +# Obtain or renew certificates from letsencrypt, to be used with nginx +# webroot verification. +# +# Domains to be certified are defined in /etc/nginx/domains. +# +# The pre-hook is used to remove snakeoil certificates that are +# required to bootstrap nginx configurations (nginx fails to start +# without ssl certificates). The hook is required because certbot does +# not overwrite foreign certificates, as described in this issue +# https://github.com/certbot/certbot/issues/3396 +set -o exiterr +set -o unset + +email="jakob@odersky.com" + +extra_flags="" +if [ "$1" = --test ]; then + extra_flags="--test-cert" +fi + +certbot certonly $extra_flags \ + --noninteractive \ + --agree-tos \ + --email "$email" \ + --cert-name nginx \ + --webroot --webroot-path /var/www/letsencrypt \ + --pre-hook "sh -c '(openssl x509 -in /etc/letsencrypt/live/nginx/fullchain.pem -noout -text) | grep --quiet letsencrypt || rm -r /etc/letsencrypt/live/nginx'" \ + --post-hook "systemctl reload nginx" \ + -d "$(grep "^[^#;]" /etc/nginx/letsencryptdomains | paste --delimiter=, --serial)" |