rod.wright/LetsencryptCertUpdater
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updates to support unifi controller

Browse Source
This commit is contained in:
Rod Wright
2026-07-21 09:42:27 -04:00
parent 36c07a46bc
commit e49a15bee6
1 changed files with 15 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
usr/local/bin/update-letsencrypt-certs
View File

@@ -3,7 +3,7 @@
# update-letsencrypt-certs # update-letsencrypt-certs
# Pull SSL certificates form a certificate host and restart # Pull SSL certificates form a certificate host and restart
# servers as necessary. # servers as necessary.
# 7/19/2026 Rod Wright # 7/21/2026 Rod Wright
# Set the host from which certificates will be pulled # Set the host from which certificates will be pulled
cert_host="portal.thermionic.net" cert_host="portal.thermionic.net"
@@ -12,28 +12,37 @@ cert_host="portal.thermionic.net"
http_server="nginx" http_server="nginx"
#http_server="apache2" #http_server="apache2"
#http_server="pveproxy" #http_server="pveproxy"
#http_server="unifi"
# Pull certs from the certifiate host # Pull certs from the certifiate host
if rsync -aL --info=stats2 root@$cert_host:/etc/letsencrypt/live/thermionic.net/ /etc/ssl/thermionic.net/ |grep -q "Number of regular files transferred: 0"; then http_server_restart=false; else http_server_restart=true; fi if rsync -aL --info=stats2 root@$cert_host:/etc/letsencrypt/live/thermionic.net/ /etc/ssl/thermionic.net/ |grep -q "Number of regular files transferred: 0"; then http_server_restart=false; else http_server_restart=true; fi
#Certs go in a non-standard place for a proxmox server #Certs go in a non-standard place for a proxmox server
if [ "$http_server" = "pveproxy" ] if [[ "$http_server" = "pveproxy" ]]
then then
cp -f /etc/ssl/thermionic.net/fullchain.pem /etc/pve/local/pveproxy-ssl.pem cp -f /etc/ssl/thermionic.net/fullchain.pem /etc/pve/local/pveproxy-ssl.pem
cp -f /etc/ssl/thermionic.net/privkey.pem /etc/pve/local/pveproxy-ssl.key cp -f /etc/ssl/thermionic.net/privkey.pem /etc/pve/local/pveproxy-ssl.key
fi fi
# Populate additional TLS cers for iRedMail server # Populate additional TLS cers for iRedMail server
if [ -e "/etc/ssl/private/iRedMail.key" ] if [[ -e "/etc/ssl/private/iRedMail.key" ]]
then then
cp -f /etc/ssl/thermionic.net/fullchain.pem /etc/ssl/certs/iRedMail.crt cp -f /etc/ssl/thermionic.net/fullchain.pem /etc/ssl/certs/iRedMail.crt
cp -f /etc/ssl/thermionic.net/privkey.pem /etc/ssl/private/iRedMail.key cp -f /etc/ssl/thermionic.net/privkey.pem /etc/ssl/private/iRedMail.key
fi fi
# Restart if required # Restart if required
if $http_server_restart; then if $http_server_restart
echo "New certs downloaded. Restarting $http_server." then
systemctl restart $http_server if [[ $http_server == "unifi" ]]
then
# Stop unifi, recreate keystore, start unifi
unifi_ssl_import.sh
else
# Restart normal http servers
echo "New certs downloaded. Restarting $http_server."
systemctl restart $http_server
fi
else else
echo "Certs are up to date. $http_server restart not required." echo "Certs are up to date. $http_server restart not required."
fi fi