This commit is contained in:
mwiegand 2021-11-06 16:26:21 +01:00
parent 684c2b46e1
commit be7580aca5

View file

@ -29,23 +29,25 @@ deploy_cert() {
FULLCHAINFILE="$4" FULLCHAINFILE="$4"
CHAINFILE="$5" CHAINFILE="$5"
case $DOMAIN in
% for domain, conf in sorted(domains.items()): % for domain, conf in sorted(domains.items()):
% if conf.get('location', None): <% if not conf: continue %>\
if [[ $DOMAIN = ${domain} ]] ${domain})
then % if conf.get('location', None):
cat "$KEYFILE" > "${conf['location']}/privkey.pem" cat "$KEYFILE" > "${conf['location']}/privkey.pem"
cat "$CERTFILE" > "${conf['location']}/cert.pem" cat "$CERTFILE" > "${conf['location']}/cert.pem"
cat "$FULLCHAINFILE" > "${conf['location']}/fullchain.pem" cat "$FULLCHAINFILE" > "${conf['location']}/fullchain.pem"
cat "$CHAINFILE" > "${conf['location']}/chain.pem" cat "$CHAINFILE" > "${conf['location']}/chain.pem"
fi % endif
% endif % if conf.get('owner', None):
% if conf.get('owner', None): chown ${conf['owner']} "${conf['location']}/privkey.pem" "${conf['location']}/cert.pem" "${conf['location']}/fullchain.pem" "${conf['location']}/chain.pem"
chown ${conf['owner']} "${conf['location']}/privkey.pem" "${conf['location']}/cert.pem" "${conf['location']}/fullchain.pem" "${conf['location']}/chain.pem" % endif
% endif % for service in sorted(conf.get('reload', [])):
% for service in sorted(conf.get('reload', [])): systemctl reload-or-restart ${service}
systemctl reload-or-restart ${service} % endfor
% endfor ;;
% endfor % endfor
esac
} }
HANDLER="$1"; shift HANDLER="$1"; shift