Some scripts to create and renew all your certificates, and concatenate fullchain and privkey so haproxy is able to use it
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 

31 lines
973 B

#!/bin/bash
#Configuration variables
certbot_bin="/usr/bin/certbot"
postfix_pem_path="/etc/ssl/"
mail_server="192.168.201.172"
if [ ! $# -ge 1 ] ; then
echo "$(date +%c) Please give domain name as parameter"
exit 1
fi
DOMAIN_OPTION=""
for domain in "${@}"; do
DOMAIN_OPTION="${DOMAIN_OPTION} -d mail.${domain} -d smtp.${domain} -d imap.${domain}"
done
echo "$(date +%c) Generate certificat for ${@}"
${certbot_bin} certonly ${DOMAIN_OPTION} --renew-by-default --http-01-port 63443 --agree-tos
if [ $? -eq 0 ]; then
echo "$(date +%c) Success!"
rsync -az -L /etc/letsencrypt/live/mail.$1/cert.pem /etc/letsencrypt/live/mail.$1/privkey.pem /etc/letsencrypt/live/mail.$1/chain.pem ssl-san@${mail_server}:${postfix_pem_path}
ssh ssl-san@${mail_server} "sudo systemctl reload postfix"
ssh ssl-san@${mail_server} "sudo systemctl restart dovecot"
else
echo "$(date +%c) Error creating certificate with error code $?, exit script..."
exit 1
fi
exit 0