infra/ansible-role-certificates
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fixed some autorenew letsencrypt problems

Browse source
This commit is contained in:
nd 2020-09-27 15:57:47 +02:00
parent c2c8727fe9
commit 29c8bfccdf
No known key found for this signature in database
GPG key ID: 21B5CD4DEE3670E9
5 changed files with 121 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

10
files/letsencrypt_deploy_challenge.sh
View file

@ -1,5 +1,13 @@
#!/bin/bash
set -euo pipefail
CHALLENGE_RECORD="$1"
CHALLENGE_VALUE="$2"
logger -t letsencrypt "deploying challenge for record ${CHALLENGE_RECORD} with value ${CHALLENGE_VALUE}"
for i in $LETSENCRYPT_CHALLENGE_SERVERS; do
ssh -i /etc/letsencrypt/renewkey -o "StrictHostKeyChecking no" letsencrypt@$i $(< $LETSENCRYPT_TOKEN ) $1 $2
logger -t letsencrypt "deploying to ${i}"
{ ssh -i /etc/letsencrypt/renewkey -o "StrictHostKeyChecking no" letsencrypt@$i "$(cat "$LETSENCRYPT_TOKEN")" "${CHALLENGE_RECORD}" "${CHALLENGE_VALUE}" | logger -t letsencrypt -e; } ||
{ logger -t letsencrypt "deploying failed with exit code $?"; exit 1; }
done