iankelling.org Git - distro-setup/blob - filesystem/etc/letsencrypt/renewal-hooks/deploy/certbot-renew-hook

   1 #!/bin/bash
   2 # I, Ian Kelling, follow the GNU license recommendations at
   3 # https://www.gnu.org/licenses/license-recommendations.en.html. They
   4 # recommend that small programs, < 300 lines, be licensed under the
   5 # Apache License 2.0. This file contains or is part of one or more small
   6 # programs. If a small program grows beyond 300 lines, I plan to switch
   7 # its license to GPL.
   8
   9 # Copyright 2024 Ian Kelling
  10
  11 # Licensed under the Apache License, Version 2.0 (the "License");
  12 # you may not use this file except in compliance with the License.
  13 # You may obtain a copy of the License at
  14
  15 #     http://www.apache.org/licenses/LICENSE-2.0
  16
  17 # Unless required by applicable law or agreed to in writing, software
  18 # distributed under the License is distributed on an "AS IS" BASIS,
  19 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  20 # See the License for the specific language governing permissions and
  21 # limitations under the License.
  22
  23 # Copyright (C) 2017 Ian Kelling
  24
  25 # Licensed under the Apache License, Version 2.0 (the "License");
  26 # you may not use this file except in compliance with the License.
  27 # You may obtain a copy of the License at
  28
  29 #     http://www.apache.org/licenses/LICENSE-2.0
  30
  31 # Unless required by applicable law or agreed to in writing, software
  32 # distributed under the License is distributed on an "AS IS" BASIS,
  33 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  34 # See the License for the specific language governing permissions and
  35 # limitations under the License.
  36
  37 set -eE -o pipefail
  38 trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?" >&2' ERR
  39
  40 dir=$RENEWED_LINEAGE # long caps vars just bother me
  41
  42 case $dir in
  43   /etc/letsencrypt/live/iankelling.org)
  44     cat $dir/{privkey,cert,chain}.pem > /var/lib/znc/znc.pem
  45     ;;
  46   /etc/letsencrypt/live/mumble.iankelling.org)
  47     install -m 640 -g mumble-server $dir/{privkey,fullchain}.pem /var/lib/mumble-server
  48     ;;
  49   /etc/letsencrypt/live/mail2.iankelling.org|/etc/letsencrypt/live/je.b8.nz)
  50     install -m 644 $dir/fullchain.pem /etc/exim4/exim.crt
  51     install -m 640 -g Debian-exim $dir/privkey.pem /etc/exim4/exim.key
  52     ;;
  53 esac