mirror/nginx-certbot
1
0
Fork 0
mirror of https://github.com/wmnnd/nginx-certbot synced 2023-04-20 18:47:46 +08:00
Code Issues Projects Releases Wiki Activity

Code formatting

Browse Source
This commit is contained in:
Yaroslav 2018-11-28 18:04:05 +04:00
parent 8ef8ac4a89
commit 73af7708a0
2 changed files with 12 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored Normal file
View File

@ -0,0 +1 @@
/data/certbot

35
init-letsencrypt.sh
View File

@ -1,10 +1,10 @@
#!/bin/bash #!/bin/bash
domains=( "example.org" "example.com" ) domains=( "example.com" "example.org" )
rsa_key_size=4096 rsa_key_size=4096
data_path="./data/certbot" data_path="./data/certbot"
email="" #Adding a valid address is strongly recommended email="" # Adding a valid address is strongly recommended
staging=0 #Set to 1 if you're just testing your setup to avoid hitting request limits staging=0 # Set to 1 if you're just testing your setup to avoid hitting request limits
echo "### Preparing directories in $data_path ..." echo "### Preparing directories in $data_path ..."
rm -Rf "$data_path" rm -Rf "$data_path"
@ -15,14 +15,11 @@ mkdir -p "$data_path/conf/live/$domains"
echo "### Creating dummy certificate ..." echo "### Creating dummy certificate ..."
path="/etc/letsencrypt/live/$domains" path="/etc/letsencrypt/live/$domains"
mkdir -p "$path" mkdir -p "$path"
docker-compose run --rm --entrypoint "\ docker-compose run --rm --entrypoint "openssl req -x509 -nodes -newkey rsa:4096 \
openssl req -x509 -nodes -newkey rsa:1024 -days 1\ -days 10 -keyout '$path/privkey.pem' -out '$path/fullchain.pem' -subj '/CN=localhost'" certbot
-keyout '$path/privkey.pem' \
-out '$path/fullchain.pem' \
-subj '/CN=localhost'" certbot
echo "### Downloading recommended HTTPS parameters ..." echo "### Downloading recommended TLS parameters ..."
curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot-nginx/certbot_nginx/options-ssl-nginx.conf > "$data_path/conf/options-ssl-nginx.conf" curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot-nginx/certbot_nginx/options-ssl-nginx.conf > "$data_path/conf/options-ssl-nginx.conf"
curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot/ssl-dhparams.pem > "$data_path/conf/ssl-dhparams.pem" curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot/ssl-dhparams.pem > "$data_path/conf/ssl-dhparams.pem"
@ -34,35 +31,25 @@ docker-compose up -d nginx
echo "### Deleting dummy certificate ..." echo "### Deleting dummy certificate ..."
sudo rm -Rf "$data_path/conf/live" sudo rm -Rf "$data_path/conf/live"
echo "### Downloading recommended TLS options ..."
curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot-nginx/certbot_nginx/options-ssl-nginx.conf > "$data_path/conf/options-ssl-nginx.conf"
curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot/ssl-dhparams.pem > "$data_path/conf/ssl-dhparams.pem"
echo "### Requesting initial certificate ..." echo "### Requesting initial certificate ..."
#Join $domains to -d args # Join $domains to -d args
domain_args="" domain_args=""
for domain in "${domains[@]}"; do for domain in "${domains[@]}"; do
domain_args="$domain_args -d $domain" domain_args="$domain_args -d $domain"
done done
#Select appropriate email arg # Select appropriate email arg
case "$email" in case "$email" in
"") email_arg="--register-unsafely-without-email" ;; "") email_arg="--register-unsafely-without-email" ;;
*) email_arg="--email $email" ;; *) email_arg="--email $email" ;;
esac esac
#Enable staging mode if needed # Enable staging mode if needed
if [ $staging != "0" ]; then staging_arg="--staging"; fi if [ $staging != "0" ]; then staging_arg="--staging"; fi
docker-compose run --rm --entrypoint "\ docker-compose run --rm --entrypoint "certbot certonly --webroot -w /var/www/certbot $staging_arg $email_arg \
certbot certonly --webroot -w /var/www/certbot \ $domain_args --rsa-key-size $rsa_key_size --agree-tos --force-renewal" certbot
$staging_arg \
$email_arg \
$domain_args \
--rsa-key-size $rsa_key_size \
--agree-tos \
--force-renewal" certbot
docker-compose stop nginx docker-compose stop nginx