iankelling.org Git - distro-setup/blob - certbot-renew-hook

   1 #!/bin/bash
   2 # Copyright (C) 2017 Ian Kelling
   3
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7
   8 #     http://www.apache.org/licenses/LICENSE-2.0
   9
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15
  16 set -eE -o pipefail
  17 trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?" >&2' ERR
  18
  19 domain_user=(
  20     pump.iankelling.org pumpio
  21     mumble.iankelling.org mumble-server
  22 )
  23
  24 for ((i=0; i<${#domain_user[@]}; i+=2)); do
  25     domain=${domain_user[i]}
  26     user=${domain_user[i+1]}
  27
  28     d=/etc/letsencrypt/live/$domain
  29     if [[ $RENEWED_LINEAGE == "$d" ]]; then
  30         install -m 640 -g $user $d/{privkey.pem,fullchain.pem} $(eval echo ~$user)
  31         exit 0
  32     fi
  33 done
  34
  35 if [[ $RENEWED_LINEAGE == /etc/letsencrypt/live/iankelling.org ]]; then
  36   cat /etc/letsencrypt/live/iankelling.org/{privkey,cert,chain}.pem > /var/lib/znc/znc.pem
  37 fi