iankelling.org Git - distro-setup/blob - filesystem/etc/letsencrypt/renewal-hooks/deploy/certbot-renew-hook

   1 #!/bin/bash
   2 # Copyright (C) 2017 Ian Kelling
   3
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7
   8 #     http://www.apache.org/licenses/LICENSE-2.0
   9
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15
  16 set -eE -o pipefail
  17 trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?" >&2' ERR
  18
  19 dir=$RENEWED_LINEAGE # long caps vars just bother me
  20
  21 case $dir in
  22   /etc/letsencrypt/live/iankelling.org)
  23     cat $dir/{privkey,cert,chain}.pem > /var/lib/znc/znc.pem
  24     ;;
  25   /etc/letsencrypt/live/mumble.iankelling.org)
  26     install -m 640 -g mumble-server $dir/{privkey,fullchain}.pem /var/lib/mumble-server
  27     ;;
  28   /etc/letsencrypt/live/mail2.iankelling.org|/etc/letsencrypt/live/je.b8.nz)
  29     install -m 644 $dir/fullchain.pem /etc/exim4/exim.crt
  30     install -m 640 -g Debian-exim $dir/privkey.pem /etc/exim4/exim.key
  31     ;;
  32 esac