Quico/acme-deploy-helpers
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat(quico-znc): Add ZNC and Nginx config reloads

Browse Source
This commit is contained in:
hygienic-books 2023-03-25 23:06:51 +01:00
parent e5aac1c59f
commit bea9f889ed
1 changed files with 26 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
quico_znc_nginx_reload.sh Executable file
View File

@ -0,0 +1,26 @@
#!/bin/bash
reverse_fqdn_cert_id="${1:?}"
# Prep dirs
mkdir -p '/etc/pki/tls/certs/quico-ops/'{'user/'{'nginx','znc'}}'/'"${reverse_fqdn_cert_id}"
chown -R 'znc:znc' '/etc/pki/tls/certs/quico-ops/user/znc'
chmod -R 'u=rwX,go=' '/etc/pki/tls/certs/quico-ops/user/znc'
chown -R 'nginx:nginx' '/etc/pki/tls/certs/quico-ops/user/nginx'
chmod -R 'u=rwX,go=' '/etc/pki/tls/certs/quico-ops/user/nginx'
# Prep ZNC
rsync -a '/etc/pki/tls/certs/quico-ops/system/'"${reverse_fqdn_cert_id}"'/' '/etc/pki/tls/certs/quico-ops/user/znc/'"${reverse_fqdn_cert_id}"'/'
cat '/etc/pki/tls/certs/quico-ops/user/znc/'"${reverse_fqdn_cert_id}"'/'{''"${reverse_fqdn_cert_id}"'.key','fullchain.cer'} > '/etc/pki/tls/certs/quico-ops/user/znc/'"${reverse_fqdn_cert_id}"'/znc.pem'
chown -R 'znc:znc' '/etc/pki/tls/certs/quico-ops/user/znc'
chmod -R 'u=rwX,go=' '/etc/pki/tls/certs/quico-ops/user/znc'
# Prep Nginx
rsync -a '/etc/pki/tls/certs/quico-ops/system/'"${reverse_fqdn_cert_id}"'/' '/etc/pki/tls/certs/quico-ops/user/nginx/'"${reverse_fqdn_cert_id}"'/'
chown -R 'nginx:nginx' '/etc/pki/tls/certs/quico-ops/user/nginx'
chmod -R 'u=rwX,go=' '/etc/pki/tls/certs/quico-ops/user/nginx'
# Reload Nginx if active. ZNC on the other hand always delivers newest cert.
# We don't have to care if ZNC is running.
if systemctl --quiet is-active nginx.service; then
nginx -t && nginx -s reload
fi