Mikaela/scripts
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/scripts.git synced 2024-11-29 22:59:22 +01:00
Code Issues Projects Releases Wiki Activity

acmesh-ssl.bash: add nginx config

Browse Source
This commit is contained in:
Aminda Suomalainen 2019-09-13 15:48:03 +03:00
parent 10a46ad721
commit 6d103ec071
No known key found for this signature in database
GPG Key ID: 0C207F07B2F32B67
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
bash/acmesh-ssl.bash
View File

@ -20,6 +20,7 @@ SYNCPLAYDIR=/opt/syncplay/ssl
MUMBLEDIR=/var/lib/mumble-server/ssl MUMBLEDIR=/var/lib/mumble-server/ssl
ZNCDIR=/home/znc/.znc/ssl ZNCDIR=/home/znc/.znc/ssl
BITBOTDIR=/home/bitbot/ssl BITBOTDIR=/home/bitbot/ssl
NGINXDIR=/etc/nginx/ssl
# Where is acme.sh + flags applying to them all # Where is acme.sh + flags applying to them all
ACMESH="/root/.acme.sh/acme.sh --install-cert -d $DOMAINNAME" ACMESH="/root/.acme.sh/acme.sh --install-cert -d $DOMAINNAME"
@ -29,7 +30,7 @@ SYSTEMCTLRESTART="systemctl restart --quiet"
SYSTEMCTLRELOAD="systemctl reload --quiet" SYSTEMCTLRELOAD="systemctl reload --quiet"
# Start by creating the directories if they don't exist # Start by creating the directories if they don't exist
/bin/mkdir -p $SYNCPLAYDIR $MUMBLEDIR $ZNCDIR $BITBOTDIR /bin/mkdir -p $SYNCPLAYDIR $MUMBLEDIR $ZNCDIR $BITBOTDIR $NGINXDIR
# Syncplay - note: reloads certs on every connect like ZNC # Syncplay - note: reloads certs on every connect like ZNC
$ACMESH --cert-file $SYNCPLAYDIR/cert.pem --key-file $SYNCPLAYDIR/privkey.pem --ca-file $SYNCPLAYDIR/chain.pem $ACMESH --cert-file $SYNCPLAYDIR/cert.pem --key-file $SYNCPLAYDIR/privkey.pem --ca-file $SYNCPLAYDIR/chain.pem
@ -53,3 +54,8 @@ chown -R znc:znc $ZNCDIR
$ACMESH --key-file $BITBOTDIR/key.pem --fullchain-file $BITBOTDIR/cert.pem --reloadcmd "$SYSTEMCTLRELOAD bitbot" $ACMESH --key-file $BITBOTDIR/key.pem --fullchain-file $BITBOTDIR/cert.pem --reloadcmd "$SYSTEMCTLRELOAD bitbot"
chmod -R 700 $BITBOTDIR chmod -R 700 $BITBOTDIR
chown -R bitbot:bitbot $BITBOTDIR chown -R bitbot:bitbot $BITBOTDIR
# nginx
$ACMESH --key-file $NGINXDIR/key.pem --fullchain-file $NGINXDIR/cert.pem --reloadcmd "$SYSTEMCTLRESTART nginx"
chmod -R 700 $NGINXDIR
chown -R root:root $NGINXDIR