82 lines
2.7 KiB
Bash
Executable File
82 lines
2.7 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
#move to script directory so all relative paths work
|
|
cd "$(dirname "$0")"
|
|
|
|
#includes
|
|
. ./config.sh
|
|
|
|
#remove dehyrdated letsencrypt script
|
|
#rm -R /etc/dehydrated/
|
|
#rm /usr/local/sbin/dehydrated
|
|
#rm -R /usr/src/dehydrated
|
|
#rm -R /usr/src/dns-01-manual
|
|
#rm -R /var/www/dehydrated
|
|
|
|
#request the domain name, email address and wild card domain
|
|
read -p 'Domain Name: ' domain_name
|
|
read -p 'Email Address: ' email_address
|
|
read -p 'Wild card domain name? (y/n): ' wilcard_domain_name
|
|
|
|
#get and install dehydrated
|
|
cd /usr/src && git clone https://github.com/lukas2511/dehydrated.git
|
|
cd /usr/src/dehydrated
|
|
cp dehydrated /usr/local/sbin
|
|
mkdir -p /var/www/dehydrated
|
|
mkdir -p /etc/dehydrated/certs
|
|
#echo "$domain_name *.$domain_name" > /etc/dehydrated/domains.txt
|
|
|
|
#create an alias when using wildcard dns
|
|
if [ .$wilcard_domain_name = ."y" ]; then
|
|
echo "*.$domain_name > $domain_name" > /etc/dehydrated/domains.txt
|
|
fi
|
|
|
|
#manual dns hook
|
|
cd /usr/src
|
|
git clone https://github.com/owhen/dns-01-manual.git
|
|
cd /usr/src/dns-01-manual/
|
|
cp hook.sh /etc/dehydrated/hook.sh
|
|
chmod 755 /etc/dehydrated/hook.sh
|
|
|
|
mkdir -p /etc/nginx/ssl
|
|
|
|
dehydrated --register --accept-terms
|
|
|
|
#wildcard domain
|
|
if [ .$wilcard_domain_name = ."y" ]; then
|
|
dehydrated --cron --challenge dns-01 --hook /etc/dehydrated/hook.sh
|
|
fi
|
|
|
|
#single domain
|
|
if [ .$wilcard_domain_name = ."n" ]; then
|
|
dehydrated --cron --domain $domain_name --challenge dns-01 --hook /etc/dehydrated/hook.sh
|
|
fi
|
|
|
|
#challenge methods http-01
|
|
#dehydrated --cron --challenge http-01
|
|
|
|
cd /usr/src/dehydrated
|
|
cp docs/examples/hook.sh /etc/dehydrated
|
|
cp docs/examples/config /etc/dehydrated
|
|
|
|
#vim /etc/dehydrated/config
|
|
sed "s#CONTACT_EMAIL=#CONTACT_EMAIL=$email_address" -i /etc/dehydrated/config
|
|
|
|
#update nginx config
|
|
sed "s@ssl_certificate /etc/ssl/certs/nginx.crt;@ssl_certificate /etc/dehydrated/certs/$domain_name/fullchain.pem;@g" -i /etc/nginx/sites-available/fusionpbx
|
|
sed "s@ssl_certificate_key /etc/ssl/private/nginx.key;@ssl_certificate_key /etc/dehydrated/certs/$domain_name/privkey.pem;@g" -i /etc/nginx/sites-available/fusionpbx
|
|
|
|
#read the config
|
|
/usr/sbin/nginx -t && /usr/sbin/nginx -s reload
|
|
|
|
#combine the certs into all.pem
|
|
cat /etc/dehydrated/certs/$domain_name/fullchain.pem > /etc/dehydrated/certs/$domain_name/all.pem
|
|
cat /etc/dehydrated/certs/$domain_name/privkey.pem >> /etc/dehydrated/certs/$domain_name/all.pem
|
|
#cat /etc/dehydrated/certs/$domain_name/chain.pem >> /etc/dehydrated/certs/$domain_name/all.pem
|
|
|
|
#copy the certs to the switch tls directory
|
|
mkdir -p /etc/freeswitch/tls
|
|
cp /etc/dehydrated/certs/$domain_name/*.pem /etc/freeswitch/tls
|
|
cp /etc/dehydrated/certs/all.pem /etc/freeswitch/tls/wss.pem
|
|
chown -R www-data:www-data /etc/freeswitch
|