iankelling.org Git - distro-setup/blob - machine_specific/kd/filesystem/etc/cron.daily/check-lets-encrypt-ssl-settings

   1 #!/bin/bash
   2 # Copyright (C) 2016 Ian Kelling
   3
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at
   7
   8 #     http://www.apache.org/licenses/LICENSE-2.0
   9
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15
  16 source ~/.bashrc
  17
  18 set -eE -o pipefail
  19 trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?" >&2' ERR
  20
  21 lock_file=/tmp/check-lets-encrypt-ssl-settings
  22 if [[ -e $lock_file ]]; then
  23     exit 0
  24 fi
  25
  26 d=/a/opt/certbot
  27 gitget https://github.com/certbot/certbot.git $d &>/tmp/${0##*/}.log
  28 cd $d
  29
  30 f=certbot-apache/certbot_apache/options-ssl-apache.conf
  31 out=$(git log -p --since 2016-08-14 $f)
  32
  33 if [[ $out ]]; then
  34     cat <<EOF
  35 Let's encrypt has new ssl settings. Update your web servers, then
  36 edit the date in $0, and
  37 rm $lock_file
  38 The change is:
  39 $out
  40 EOF
  41     touch $lock_file
  42 fi