Added code to populate the TLS certs on iRedMail servers
This commit is contained in:
@@ -9,18 +9,28 @@
|
||||
cert_host="portal.thermionic.net"
|
||||
|
||||
# Set which http server to restart
|
||||
#http_server="nginx"
|
||||
http_server="nginx"
|
||||
#http_server="apache2"
|
||||
http_server="pveproxy"
|
||||
#http_server="pveproxy"
|
||||
|
||||
# Pull certs from the certifiate host
|
||||
if rsync -aL --info=stats2 root@$cert_host:/etc/letsencrypt/live/thermionic.net/ /etc/ssl/thermionic.net/ |grep -q "Number of regular files transferred: 0"; then http_server_restart=false; else http_server_restart=true; fi
|
||||
|
||||
#Certs go in a non-standard place for a proxmox server
|
||||
if [ "$http_server" = "pveproxy" ]
|
||||
then
|
||||
cp -f /etc/ssl/thermionic.net/fullchain.pem /etc/pve/local/pveproxy-ssl.pem
|
||||
cp -f /etc/ssl/thermionic.net/privkey.pem /etc/pve/local/pveproxy-ssl.key
|
||||
fi
|
||||
|
||||
# Populate additional TLS cers for iRedMail server
|
||||
if [ -e "/etc/ssl/private/iRedMail.key" ]
|
||||
then
|
||||
cp -f /etc/ssl/thermionic.net/fullchain.pem /etc/ssl/certs/iRedMail.crt
|
||||
cp -f /etc/ssl/thermionic.net/privkey.pem /etc/ssl/private/iRedMail.key
|
||||
fi
|
||||
|
||||
# Restart if required
|
||||
if $http_server_restart; then
|
||||
echo "New certs downloaded. Restarting $http_server."
|
||||
systemctl restart $http_server
|
||||
|
||||
Reference in New Issue
Block a user