mirror of https://git.envs.net/envs/ops.git
87 lines
2.7 KiB
Bash
Executable File
87 lines
2.7 KiB
Bash
Executable File
#!/bin/sh
|
|
# DO NOT TOUCH IT HERE SEE GIT REPO 'envs/ops'
|
|
|
|
set -e
|
|
|
|
for domain in $RENEWED_DOMAINS; do
|
|
case $domain in
|
|
envs.net)
|
|
daemon_cert_root=/opt/lxc_ssl/envs.net
|
|
umask 077
|
|
cat "$RENEWED_LINEAGE/privkey.pem" > "$daemon_cert_root/privkey.pem"
|
|
cat "$RENEWED_LINEAGE/chain.pem" > "$daemon_cert_root/chain.pem"
|
|
cat "$RENEWED_LINEAGE/fullchain.pem" > "$daemon_cert_root/fullchain.pem"
|
|
cat /etc/ssl/certs/envs_dhparam.pem > "$daemon_cert_root/envs_dhparam.pem"
|
|
|
|
#rsync -av --numeric-ids "$daemon_cert_root" root@srv01.envs.net:/opt/ssl_certs/
|
|
#ssh root@srv01.envs.net bash -c "/opt/sync_certs.sh"
|
|
|
|
# matrix
|
|
matrix_dir=/var/lib/lxc/matrix/rootfs/etc/matrix-synapse
|
|
cp "$daemon_cert_root/privkey.pem" "$matrix_dir"/
|
|
cp "$daemon_cert_root/chain.pem" "$matrix_dir"/
|
|
cp "$daemon_cert_root/fullchain.pem" "$matrix_dir"/
|
|
chmod 644 "$matrix_dir"/*.pem
|
|
chown 108:0 "$matrix_dir"/*.pem
|
|
lxc-attach -n matrix -- bash -c "systemctl reload nginx ; systemctl restart coturn"
|
|
|
|
# pleroma
|
|
lxc-attach -n pleroma -- bash -c "systemctl reload nginx"
|
|
|
|
# monitor
|
|
lxc-attach -n moni -- bash -c "systemctl reload nginx"
|
|
|
|
# mail
|
|
# has a own letencrypt cert in container!
|
|
##lxc-attach -n mail -- bash -c "systemctl reload nginx postfix dovecot"
|
|
|
|
# mailinglists
|
|
lxc-attach -n lists -- bash -c "systemctl reload nginx postfix"
|
|
|
|
# gitea
|
|
lxc-attach -n gitea -- bash -c "systemctl reload nginx"
|
|
|
|
# drone-ci
|
|
lxc-attach -n drone -- bash -c "systemctl reload nginx"
|
|
|
|
# searx
|
|
lxc-attach -n searx -- bash -c "systemctl reload nginx"
|
|
|
|
# cryptad
|
|
lxc-attach -n pad -- bash -c "systemctl reload nginx"
|
|
|
|
# tt-rss
|
|
lxc-attach -n rss -- bash -c "systemctl restart apache2"
|
|
|
|
# privatebin
|
|
lxc-attach -n pb -- bash -c "systemctl restart apache2"
|
|
;;
|
|
|
|
envs.sh)
|
|
daemon_cert_root=/opt/lxc_ssl/envs.sh
|
|
umask 077
|
|
cat "$RENEWED_LINEAGE/privkey.pem" > "$daemon_cert_root/privkey.pem"
|
|
cat "$RENEWED_LINEAGE/chain.pem" > "$daemon_cert_root/chain.pem"
|
|
cat "$RENEWED_LINEAGE/fullchain.pem" > "$daemon_cert_root/fullchain.pem"
|
|
cat /etc/ssl/certs/envs_dhparam.pem > "$daemon_cert_root/envs_dhparam.pem"
|
|
|
|
#rsync -av --numeric-ids "$daemon_cert_root" root@srv01.envs.net:/opt/ssl_certs/
|
|
|
|
# 0x0 / fiche
|
|
lxc-attach -n null -- bash -c "systemctl reload nginx"
|
|
;;
|
|
|
|
znc.envs.net)
|
|
daemon_cert_root=/srv/znc/.znc
|
|
umask 077
|
|
cat "$RENEWED_LINEAGE/privkey.pem" > "$daemon_cert_root/znc.pem"
|
|
cat "$RENEWED_LINEAGE/fullchain.pem" >> "$daemon_cert_root/znc.pem"
|
|
cat /etc/ssl/certs/envs_dhparam.pem >> "$daemon_cert_root/znc.pem"
|
|
chown znc "$daemon_cert_root/znc.pem"
|
|
chmod 600 "$daemon_cert_root/znc.pem"
|
|
systemctl restart znc
|
|
;;
|
|
|
|
esac
|
|
done
|