mirror of
https://github.com/plantroon/acme.sh.git
synced 2024-11-09 16:01:46 +00:00
86 lines
2.8 KiB
Bash
86 lines
2.8 KiB
Bash
|
#!/usr/bin/env sh
|
||
|
|
|
||
|
|
######## Public functions #####################
|
||
|
|
|
||
|
|
#domain keyfile certfile cafile fullchain
|
||
|
|
openmediavault_deploy() {
|
||
|
|
_cdomain="$1"
|
||
|
|
_ckey="$2"
|
||
|
|
_ccert="$3"
|
||
|
|
_cca="$4"
|
||
|
|
_cfullchain="$5"
|
||
|
|
|
||
|
|
_debug _cdomain "$_cdomain"
|
||
|
|
_debug _ckey "$_ckey"
|
||
|
|
_debug _ccert "$_ccert"
|
||
|
|
_debug _cca "$_cca"
|
||
|
|
_debug _cfullchain "$_cfullchain"
|
||
|
|
|
||
|
|
_getdeployconf DEPLOY_OMV_HOST
|
||
|
|
|
||
|
|
if [ -z "$DEPLOY_OMV_HOST" ]; then
|
||
|
|
_debug "Using _cdomain as DEPLOY_OMV_HOST, please set if not correct."
|
||
|
|
DEPLOY_OMV_HOST="$_cdomain"
|
||
|
|
fi
|
||
|
|
|
||
|
|
_getdeployconf DEPLOY_OMV_USER
|
||
|
|
|
||
|
|
if [ -z "$DEPLOY_OMV_USER" ]; then
|
||
|
|
DEPLOY_OMV_USER="admin"
|
||
|
|
fi
|
||
|
|
|
||
|
|
_savedeployconf DEPLOY_OMV_HOST "$DEPLOY_OMV_HOST"
|
||
|
|
_savedeployconf DEPLOY_OMV_USER "$DEPLOY_OMV_USER"
|
||
|
|
|
||
|
|
_command="omv-rpc -u $DEPLOY_OMV_USER 'CertificateMgmt' 'getList' '{\"start\": 0, \"limit\": -1}' | jq -r '.data[] | select(.name==\"/CN='$_cdomain'\") | .uuid'"
|
||
|
|
# shellcheck disable=SC2086
|
||
|
|
_uuid=$(ssh "root@$DEPLOY_OMV_HOST" "$_command")
|
||
|
|
_debug _command "$_command"
|
||
|
|
|
||
|
|
if [ -z "$_uuid" ]; then
|
||
|
|
_info "[OMV deploy-hook] Domain $_cdomain has no certificate in openmediavault, creating it!"
|
||
|
|
_command="omv-rpc -u $DEPLOY_OMV_USER 'CertificateMgmt' 'create' '{\"cn\": \"test.example.com\", \"size\": 4096, \"days\": 3650, \"c\": \"\", \"st\": \"\", \"l\": \"\", \"o\": \"\", \"ou\": \"\", \"email\": \"\"}' | jq -r '.uuid'"
|
||
|
|
# shellcheck disable=SC2086
|
||
|
|
_uuid=$(ssh "root@$DEPLOY_OMV_HOST" "$_command")
|
||
|
|
_debug _command "$_command"
|
||
|
|
|
||
|
|
if [ -z "$_uuid" ]; then
|
||
|
|
_err "[OMB deploy-hook] An error occured while creating the certificate"
|
||
|
|
return 1
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
|
||
|
|
_info "[OMV deploy-hook] Domain $_cdomain has uuid: $_uuid"
|
||
|
|
_fullchain=$(jq <"$_cfullchain" -aRs .)
|
||
|
|
_key=$(jq <"$_ckey" -aRs .)
|
||
|
|
|
||
|
|
_debug _fullchain "$_fullchain"
|
||
|
|
_debug _key "$_key"
|
||
|
|
|
||
|
|
_info "[OMV deploy-hook] Updating key and certificate in openmediavault"
|
||
|
|
_command="omv-rpc -u $DEPLOY_OMV_USER 'CertificateMgmt' 'set' '{\"uuid\":\"$_uuid\", \"certificate\":$_fullchain, \"privatekey\":$_key, \"comment\":\"acme.sh deployed $(date)\"}'"
|
||
|
|
# shellcheck disable=SC2029
|
||
|
|
_result=$(ssh "root@$DEPLOY_OMV_HOST" "$_command")
|
||
|
|
_debug _result "$_result"
|
||
|
|
|
||
|
|
_debug _command "$_command"
|
||
|
|
|
||
|
|
_info "[OMV deploy-hook] Asking openmediavault to apply changes... (this could take some time, hang in there)"
|
||
|
|
_command="omv-rpc -u $DEPLOY_OMV_USER 'Config' 'applyChanges' '{\"modules\":[], \"force\": false}'"
|
||
|
|
# shellcheck disable=SC2029
|
||
|
|
_result=$(ssh "root@$DEPLOY_OMV_HOST" "$_command")
|
||
|
|
|
||
|
|
_debug _command "$_command"
|
||
|
|
_debug _result "$_result"
|
||
|
|
|
||
|
|
_info "[OMV deploy-hook] Asking nginx to reload"
|
||
|
|
_command="nginx -s reload"
|
||
|
|
# shellcheck disable=SC2029
|
||
|
|
_result=$(ssh "root@$DEPLOY_OMV_HOST" "$_command")
|
||
|
|
|
||
|
|
_debug _command "$_command"
|
||
|
|
_debug _result "$_result"
|
||
|
|
|
||
|
|
return 0
|
||
|
|
}
|