Mikaela/scripts
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/scripts.git synced 2024-12-28 05:42:37 +01:00
Code Issues Projects Releases Wiki Activity

acmesh-ssl.sh: initial commit

Browse Source
This commit is contained in:
Aminda Suomalainen 2019-08-09 14:12:58 +03:00
parent 2ebe287ce4
commit fe5ff27b2f
No known key found for this signature in database
GPG Key ID: 0C207F07B2F32B67
1 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
bash/acmesh-ssl.sh Normal file
View File

@ -0,0 +1,29 @@
#!/bin/bash
# ssl.sh - for acme.sh edition
# WARNING!
# Check file permissions very carefully so other users cannot access the
# certificate copies.
# Used with crontab.
# Where the certificate files are
CERTDIR=/root/.acme.sh/relpda.mikaela.info
# TODO when it generally works
#DOMAINNAME=relpda.mikaela.info
# Syncplay - TODO https://github.com/Syncplay/syncplay/issues/250
cp $CERTDIR/fullchain.cer /opt/syncplay/ssl/chain.pem
cp $CERTDIR/relpda.mikaela.info.key /opt/syncplay/ssl/privkey.pem
cp $CERTDIR/relpda.mikaela.info.cer /opt/syncplay/ssl/cert.pem
chown -R syncplay:root /opt/syncplay/ssl
# Mumble
cp $CERTDIR/{fullchain.cer,relpda.mikaela.info.key} /var/lib/mumble-server/ssl/
chown -R mumble-server:mumble-server /var/lib/mumble-server/ssl/
# 1.3.0+ reloads certificate without restart on SIGUSR1
pkill $(cat /var/run/mumble-server/mumble-server.pid) -USR1
# ZNC originally via https://wiki.znc.in/Signed_SSL_certificate#Certbot
# then adjusted to certbot as Mumble above
cat $CERTDIR/{relpda.mikaela.info.key,fullchain.cer} > /home/znc/.znc/znc.pem