aboutsummaryrefslogtreecommitdiffstats
path: root/roles/certbot/files/etc/pki/tls/certbot-post.sh
blob: b39ef67a284205bbdb8871e1115fb327fc65151d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
#!/bin/bash

exec 1> >(logger -s -t $(basename "$0")) 2>&1

usage() {
  echo "$0 -c CERT_PATH -k KEY_PATH [-o OWNER] [-m MODE] [POST_COMMAND ...]"
  exit 1
}

OWNER=root:root
MODE=400

while getopts ':c:k:m:o:' opt; do
  case $opt in
    c) CERT_PATH=$OPTARG ;;
    k) KEY_PATH=$OPTARG ;;
    m) MODE=$OPTARG ;;
    o) OWNER=$OPTARG ;;
    *) usage ;;
  esac
done

shift $((OPTIND-1))

if [ -z "$CERT_PATH" -o -z "$KEY_PATH" ]; then
  usage
fi

OWNER_USER=${OWNER%:*}
OWNER_GROUP=${OWNER#*:}
OWNER_GROUP=${OWNER_GROUP:-$OWNER_USER}

install -v -m "$MODE" -o "${OWNER_USER}" -g "${OWNER_GROUP}" "${RENEWED_LINEAGE}/fullchain.pem" "$CERT_PATH"
install -v -m "$MODE" -o "${OWNER_USER}" -g "${OWNER_GROUP}" "${RENEWED_LINEAGE}/privkey.pem"   "$KEY_PATH"

# run post-command
if (($#)); then
  echo "running post-command: $*"
  "$@"
fi