actcur-ansible/role-certbot
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added freeipa handling

Browse source
This commit is contained in:
Beth Parker 2025-03-29 22:02:27 -05:00
parent 1d44d8380b
commit 1f781ccf99
1 changed files with 17 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
files/certbot-renewal.sh
View file

@ -1,10 +1,25 @@
#! /bin/bash #! /bin/bash
#should probably add logic to only halt/reload once (and only if necessary)
function halt() {
#stop services if necessary
if [ -d /var/lib/ipa/ ]
#stop httpd
systemctl stop httpd
fi
}
function reload() { function reload() {
#reload/restart relevant services #reload/restart relevant services
if [ -d /etc/nginx/certs/ ] if [ -d /etc/nginx/certs/ ]
then then
systemctl reload nginx systemctl reload nginx
fi fi
if [ -d /var/lib/ipa/ ]
#restart httpd
/scripts/install_cacerts.sh
systemctl start httpd
#load cert
fi
} }
dom=`date +%d` dom=`date +%d`
@ -21,6 +36,7 @@ do
if [[ $today > $expires ]] if [[ $today > $expires ]]
then then
echo Certificate for $f is expired, renewing >> $log echo Certificate for $f is expired, renewing >> $log
halt()
certbot renew --cert-name $f >> /var/log/certbot-renewal.log certbot renew --cert-name $f >> /var/log/certbot-renewal.log
reload() reload()
continue continue
@ -34,6 +50,7 @@ do
if [[ $dom -eq $rdate ]] if [[ $dom -eq $rdate ]]
then then
echo Date falls within renewal window for $f, attempting renewal >> $log echo Date falls within renewal window for $f, attempting renewal >> $log
halt()
certbot renew --cert-name $f >> $log certbot renew --cert-name $f >> $log
reload() reload()
break break