2017-02-02 21:57:24 +01:00
|
|
|
#!/bin/sh
|
|
|
|
|
|
2017-02-02 21:22:29 +01:00
|
|
|
domain_name=subdomain.domain.com
|
|
|
|
|
email=username@domain.com
|
|
|
|
|
|
2017-02-02 22:53:29 +01:00
|
|
|
#remove previous install
|
2017-02-02 21:57:24 +01:00
|
|
|
rm -R /opt/letsencrypt
|
2017-02-02 22:34:35 +01:00
|
|
|
rm -R /etc/letsencrypt
|
|
|
|
|
|
2017-02-02 22:53:29 +01:00
|
|
|
#enable fusionpbx nginx config
|
|
|
|
|
cp resources/nginx/fusionpbx /etc/nginx/sites-available/fusionpbx
|
|
|
|
|
ln -s /etc/nginx/sites-available/fusionpbx /etc/nginx/sites-enabled/fusionpbx
|
|
|
|
|
|
2017-02-02 21:22:29 +01:00
|
|
|
git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt
|
2017-02-02 21:57:24 +01:00
|
|
|
chmod 755 /opt/letsencrypt/certbot-auto
|
|
|
|
|
/opt/letsencrypt/./certbot-auto
|
2017-02-02 21:22:29 +01:00
|
|
|
mkdir -p /etc/letsencrypt/configs
|
2017-02-02 22:37:28 +01:00
|
|
|
mkdir -p /var/www/letsencrypt/
|
2017-02-02 21:57:24 +01:00
|
|
|
|
|
|
|
|
#cd $pwd
|
|
|
|
|
#cd "$(dirname "$0")"
|
|
|
|
|
|
|
|
|
|
cp letsencrypt/domain_name.conf /etc/letsencrypt/configs/$domain_name.conf
|
|
|
|
|
|
2017-02-02 22:34:35 +01:00
|
|
|
sed "s#{domain_name}#$domain_name#g" -i /etc/letsencrypt/configs/$domain_name.conf
|
|
|
|
|
sed "s#{email_address}#$email#g" -i /etc/letsencrypt/configs/$domain_name.conf
|
|
|
|
|
|
|
|
|
|
#letsencrypt
|
2017-02-02 23:00:16 +01:00
|
|
|
#sed "s@#letsencrypt@location /.well-known/acme-challenge { root /var/www/letsencrypt; }@g" -i /etc/nginx/sites-available/fusionpbx
|
2017-02-02 22:34:35 +01:00
|
|
|
|
|
|
|
|
cd /opt/letsencrypt && ./letsencrypt-auto --config /etc/letsencrypt/configs/$domain_name.conf certonly
|
|
|
|
|
|
|
|
|
|
sed "s@ssl_certificate /etc/ssl/certs/nginx.crt;@ssl_certificate /etc/letsencrypt/live/$domain_name/fullchain.pem;@g" -i /etc/nginx/sites-available/fusionpbx
|
|
|
|
|
sed "s@ssl_certificate_key /etc/ssl/private/nginx.key;@ssl_certificate_key /etc/letsencrypt/live/$domain_name/privkey.pem;@g" -i /etc/nginx/sites-available/fusionpbx
|
|
|
|
|
|
|
|
|
|
/usr/sbin/nginx -t && /usr/sbin/nginx -s reload
|
