dominik/snippets
Archived
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

conflict

Browse Source
This commit is contained in:
Dominik Chilla 2020-03-24 00:18:01 +01:00
commit da44aa7e4a
3 changed files with 32 additions and 36 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
acme/README.md
View File

@ -1,22 +1,21 @@
# ACME - snippet to obtain let´s encrpyt certificates authenticated by DNS-01 # ACME - snippet to obtain let´s encrpyt certificates authenticated by DNS-01
## Prerequisites
* bash
* curl
* openssl
* cron
## Dockerfile: ## Dockerfile:
``` ```
ADD ./snippets/acme/dehydrated /dehydrated/ ADD ./snippets/acme/dehydrated /dehydrated/
ADD ./snippets/acme/config /dehydrated/config ADD ./snippets/acme/config /dehydrated/config
ADD ./snippets/acme/get_cert_ddns01.sh /app/get_cert_ddns01.sh ADD ./snippets/acme/get_cert_ddns01.sh /app/get_cert_ddns01.sh
ADD ./snippets/acme/zwackl_hook.sh /app/zwackl_hook.sh ADD ./snippets/acme/zwackl_hook.sh /app/zwackl_hook.sh
ADD ./snippets/acme/cronjob.daily /etc/periodic/daily/acme
``` ```
**Do not forget to include the cron snippet!** **Do not forget to include the cron snippet!**
## Cronjob
`/etc/periodic/daily/acme`:
```
#!/bin/bash
. /cron_env && /dehydrated/dehydrated --cron -t dns-01 -k /app/zwackl_hook.sh && ${ACME_RELOAD_CMD}
```
## Environment ## Environment
* ACME_FQDNS (required) * ACME_FQDNS (required)
* ACME_RELOAD_CMD (required) * ACME_RELOAD_CMD (required)
@ -24,3 +23,4 @@ ADD ./snippets/acme/zwackl_hook.sh /app/zwackl_hook.sh
* STAGING_URI (optional) * STAGING_URI (optional)
* DDNS01URI (required) * DDNS01URI (required)
* DDNS01KEY (required) * DDNS01KEY (required)
* DDNS01_ONECERT (optional)

2
acme/get_cert_ddns01.sh
View File

@ -40,7 +40,6 @@ if [ ! -z "${ACME_FQDNS+x}" ]; then
fi fi
echo -n "" > /dehydrated/domains.txt echo -n "" > /dehydrated/domains.txt
for fqdn in ${ACME_FQDNS}; do for fqdn in ${ACME_FQDNS}; do
echo "${fqdn}"
echo "${ONELINE}" "${fqdn} " >> /dehydrated/domains.txt echo "${ONELINE}" "${fqdn} " >> /dehydrated/domains.txt
if [ ! -d "/secrets/ssl/${fqdn}" ]; then if [ ! -d "/secrets/ssl/${fqdn}" ]; then
install -d -m 775 "/secrets/ssl/${fqdn}" install -d -m 775 "/secrets/ssl/${fqdn}"
@ -64,7 +63,6 @@ if [ ! -z "${ACME_FQDNS+x}" ]; then
if [ ! -z "${RUN_DEHYDRATED}" ]; then if [ ! -z "${RUN_DEHYDRATED}" ]; then
/dehydrated/dehydrated --cron -t dns-01 -k /app/zwackl_hook.sh /dehydrated/dehydrated --cron -t dns-01 -k /app/zwackl_hook.sh
fi fi
export CROND_ENABLE='acme'
chmod -R +x /dehydrated/certs chmod -R +x /dehydrated/certs
else else
echo "Directory /dehydrated not found!" echo "Directory /dehydrated not found!"

2
cron/start_cron.sh
View File

@ -1,6 +1,5 @@
#!/bin/sh #!/bin/sh
if [ ! -z "${CROND_ENABLE+x}" ]; then
# serialize ENV for cron-jobs # serialize ENV for cron-jobs
TMP_FILE=/tmp/cron_env TMP_FILE=/tmp/cron_env
OUT_FILE=/cron_env OUT_FILE=/cron_env
@ -25,5 +24,4 @@ if [ ! -z "${CROND_ENABLE+x}" ]; then
unlink "${TMP_FILE}" unlink "${TMP_FILE}"
# start crond in background # start crond in background
/usr/sbin/crond -b -S /usr/sbin/crond -b -S
fi