dominik/snippets
Archived
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

conflict

Browse Source
This commit is contained in:
Dominik Chilla 2020-03-24 00:18:01 +01:00
commit da44aa7e4a
3 changed files with 32 additions and 36 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
acme/README.md
View File

@ -1,22 +1,21 @@
# ACME - snippet to obtain let´s encrpyt certificates authenticated by DNS-01 # ACME - snippet to obtain let´s encrpyt certificates authenticated by DNS-01
## Prerequisites
* bash
* curl
* openssl
* cron
## Dockerfile: ## Dockerfile:
``` ```
ADD ./snippets/acme/dehydrated /dehydrated/ ADD ./snippets/acme/dehydrated /dehydrated/
ADD ./snippets/acme/config /dehydrated/config ADD ./snippets/acme/config /dehydrated/config
ADD ./snippets/acme/get_cert_ddns01.sh /app/get_cert_ddns01.sh ADD ./snippets/acme/get_cert_ddns01.sh /app/get_cert_ddns01.sh
ADD ./snippets/acme/zwackl_hook.sh /app/zwackl_hook.sh ADD ./snippets/acme/zwackl_hook.sh /app/zwackl_hook.sh
ADD ./snippets/acme/cronjob.daily /etc/periodic/daily/acme
``` ```
**Do not forget to include the cron snippet!** **Do not forget to include the cron snippet!**
## Cronjob
`/etc/periodic/daily/acme`:
```
#!/bin/bash
. /cron_env && /dehydrated/dehydrated --cron -t dns-01 -k /app/zwackl_hook.sh && ${ACME_RELOAD_CMD}
```
## Environment ## Environment
* ACME_FQDNS (required) * ACME_FQDNS (required)
* ACME_RELOAD_CMD (required) * ACME_RELOAD_CMD (required)
@ -24,3 +23,4 @@ ADD ./snippets/acme/zwackl_hook.sh /app/zwackl_hook.sh
* STAGING_URI (optional) * STAGING_URI (optional)
* DDNS01URI (required) * DDNS01URI (required)
* DDNS01KEY (required) * DDNS01KEY (required)
* DDNS01_ONECERT (optional)

2
acme/get_cert_ddns01.sh
View File

@ -40,7 +40,6 @@ if [ ! -z "${ACME_FQDNS+x}" ]; then
fi fi
echo -n "" > /dehydrated/domains.txt echo -n "" > /dehydrated/domains.txt
for fqdn in ${ACME_FQDNS}; do for fqdn in ${ACME_FQDNS}; do
echo "${fqdn}"
echo "${ONELINE}" "${fqdn} " >> /dehydrated/domains.txt echo "${ONELINE}" "${fqdn} " >> /dehydrated/domains.txt
if [ ! -d "/secrets/ssl/${fqdn}" ]; then if [ ! -d "/secrets/ssl/${fqdn}" ]; then
install -d -m 775 "/secrets/ssl/${fqdn}" install -d -m 775 "/secrets/ssl/${fqdn}"
@ -64,7 +63,6 @@ if [ ! -z "${ACME_FQDNS+x}" ]; then
if [ ! -z "${RUN_DEHYDRATED}" ]; then if [ ! -z "${RUN_DEHYDRATED}" ]; then
/dehydrated/dehydrated --cron -t dns-01 -k /app/zwackl_hook.sh /dehydrated/dehydrated --cron -t dns-01 -k /app/zwackl_hook.sh
fi fi
export CROND_ENABLE='acme'
chmod -R +x /dehydrated/certs chmod -R +x /dehydrated/certs
else else
echo "Directory /dehydrated not found!" echo "Directory /dehydrated not found!"

50
cron/start_cron.sh
View File

@ -1,29 +1,27 @@
#!/bin/sh #!/bin/sh
if [ ! -z "${CROND_ENABLE+x}" ]; then # serialize ENV for cron-jobs
# serialize ENV for cron-jobs TMP_FILE=/tmp/cron_env
TMP_FILE=/tmp/cron_env OUT_FILE=/cron_env
OUT_FILE=/cron_env echo -n '' > "${OUT_FILE}"
echo -n '' > "${OUT_FILE}" env > "${TMP_FILE}"
env > "${TMP_FILE}" while read -r line; do
while read -r line; do echo "${line}" | grep -q "^PWD="
echo "${line}" | grep -q "^PWD=" if [ $? = 0 ]; then
if [ $? = 0 ]; then continue
continue fi
fi echo "${line}" | grep -q "\s"
echo "${line}" | grep -q "\s" if [ $? = 0 ]; then
if [ $? = 0 ]; then # double-quote blank separated values for $(export)
# double-quote blank separated values for $(export) # 1. awk: replace first(!) appearance of = with ="
# 1. awk: replace first(!) appearance of = with =" # 2. awk: replace end of line with double-quotes
# 2. awk: replace end of line with double-quotes QUOTED=$(echo "${line}" | awk '{sub(/=/,"=\"");}1'| awk '{sub(/$/,"\"");}1')
QUOTED=$(echo "${line}" | awk '{sub(/=/,"=\"");}1'| awk '{sub(/$/,"\"");}1') echo "export ${QUOTED}" >> "${OUT_FILE}"
echo "export ${QUOTED}" >> "${OUT_FILE}" else
else echo "export ${line}" >> "${OUT_FILE}"
echo "export ${line}" >> "${OUT_FILE}" fi
fi done <"${TMP_FILE}"
done <"${TMP_FILE}" unlink "${TMP_FILE}"
unlink "${TMP_FILE}" # start crond in background
# start crond in background /usr/sbin/crond -b -S
/usr/sbin/crond -b -S
fi