2019-08-09 13:12:58 +02:00
|
|
|
#!/bin/bash
|
|
|
|
|
|
|
|
# ssl.sh - for acme.sh edition
|
|
|
|
|
|
|
|
# WARNING!
|
|
|
|
# Check file permissions very carefully so other users cannot access the
|
|
|
|
# certificate copies.
|
|
|
|
# Used with crontab.
|
|
|
|
|
2019-08-09 15:03:39 +02:00
|
|
|
# The domain the certs are mainly issued for
|
2019-08-09 13:25:42 +02:00
|
|
|
DOMAINNAME=relpda.mikaela.info
|
2019-08-09 15:03:39 +02:00
|
|
|
|
|
|
|
# Where is acme.sh + flags applying to them all
|
|
|
|
ACMESH="/root/.acme.sh/acme.sh --install-cert -d $DOMAINNAME"
|
2019-08-09 13:12:58 +02:00
|
|
|
|
|
|
|
# Syncplay - TODO https://github.com/Syncplay/syncplay/issues/250
|
2019-08-09 15:03:39 +02:00
|
|
|
$ACMESH --cert-file /opt/syncplay/ssl/cert.pem --key-file /opt/syncplay/ssl/privkey.pem --fullchain-file /opt/syncplay/ssl/chain.pem --reloadcmd "systemctl restart syncplay-server --quiet"
|
2019-08-09 13:25:42 +02:00
|
|
|
chmod -R 700 /opt/syncplay/ssl
|
2019-08-09 13:12:58 +02:00
|
|
|
chown -R syncplay:root /opt/syncplay/ssl
|
|
|
|
|
|
|
|
# Mumble
|
2019-08-09 15:03:39 +02:00
|
|
|
$ACMESH --fullchain-file /var/lib/mumble-server/ssl/fullchain.cer --key-file /var/lib/mumble-server/ssl/$DOMAINNAME.key --reloadcmd "systemctl restart mumble-server --quiet"
|
|
|
|
# future on 1.3.0 +
|
|
|
|
# --reloadcmd "pkill $(cat /var/run/mumble-server/mumble-server.pid) -USR1"
|
2019-08-09 13:25:42 +02:00
|
|
|
chmod -R 700 /var/lib/mumble-server/ssl/
|
2019-08-09 13:12:58 +02:00
|
|
|
chown -R mumble-server:mumble-server /var/lib/mumble-server/ssl/
|
|
|
|
|
2019-08-09 15:03:39 +02:00
|
|
|
# ZNC 1.7.0 (SSLCertFile & SSLKeyFile in znc.conf)
|
2019-08-09 13:58:52 +02:00
|
|
|
# znc.conf's SSLDHParamFile is created by `openssl dhparam 2048 > /home/znc/.znc/ssl/dh.pem`
|
2019-08-09 15:03:39 +02:00
|
|
|
$ACMESH --fullchain-file /home/znc/.znc/ssl/fullchain.cer --key-file /home/znc/.znc/ssl/$DOMAINNAME.key
|
2019-08-09 13:58:52 +02:00
|
|
|
chmod -R 700 /home/znc/.znc/ssl/
|
2019-08-09 15:03:39 +02:00
|
|
|
chown -R znc:znc /home/znc/.znc/ssl/
|