Przeglądaj źródła

Update letsencrypt.sh

FusionPBX 8 lat temu
rodzic
commit
a6c8493793
1 zmienionych plików z 14 dodań i 2 usunięć
  1. 14 2
      debian/resources/letsencrypt.sh

+ 14 - 2
debian/resources/letsencrypt.sh

@@ -4,6 +4,8 @@ domain_name=subdomain.domain.com
 [email protected]
 [email protected]
 
 
 rm -R /opt/letsencrypt
 rm -R /opt/letsencrypt
+rm -R /etc/letsencrypt
+
 git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt
 git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt
 chmod 755 /opt/letsencrypt/certbot-auto
 chmod 755 /opt/letsencrypt/certbot-auto
 /opt/letsencrypt/./certbot-auto
 /opt/letsencrypt/./certbot-auto
@@ -14,5 +16,15 @@ mkdir -p /etc/letsencrypt/configs
 
 
 cp letsencrypt/domain_name.conf /etc/letsencrypt/configs/$domain_name.conf
 cp letsencrypt/domain_name.conf /etc/letsencrypt/configs/$domain_name.conf
 
 
-sed 's#{domain_name}#$domain_name#g' -i /etc/letsencrypt/configs/$domain_name.conf
-sed 's#{email_address}#$email#g' -i /etc/letsencrypt/configs/$domain_name.conf
+sed "s#{domain_name}#$domain_name#g" -i /etc/letsencrypt/configs/$domain_name.conf
+sed "s#{email_address}#$email#g" -i /etc/letsencrypt/configs/$domain_name.conf
+
+#letsencrypt
+sed "s@#letsencrypt@location /.well-known/acme-challenge { root /var/www/letsencrypt; }@g" -i /etc/nginx/sites-available/fusionpbx
+
+cd /opt/letsencrypt && ./letsencrypt-auto --config /etc/letsencrypt/configs/$domain_name.conf certonly
+
+sed "s@ssl_certificate         /etc/ssl/certs/nginx.crt;@ssl_certificate /etc/letsencrypt/live/$domain_name/fullchain.pem;@g" -i /etc/nginx/sites-available/fusionpbx
+sed "s@ssl_certificate_key     /etc/ssl/private/nginx.key;@ssl_certificate_key /etc/letsencrypt/live/$domain_name/privkey.pem;@g" -i /etc/nginx/sites-available/fusionpbx
+
+/usr/sbin/nginx -t && /usr/sbin/nginx -s reload