|
|
|
@ -3,7 +3,7 @@
|
|
|
|
|
# Script to deploy certificates to remote server by SSH
|
|
|
|
|
# Note that SSH must be able to login to remote host without a password...
|
|
|
|
|
# SSH Keys must have been exchanged with the remote host. Validate and
|
|
|
|
|
# test that you can login to USER@URL from the host running acme.sh before
|
|
|
|
|
# test that you can login to USER@SERVER from the host running acme.sh before
|
|
|
|
|
# using this script.
|
|
|
|
|
#
|
|
|
|
|
# The following variables exported from environment will be used.
|
|
|
|
@ -13,7 +13,8 @@
|
|
|
|
|
#
|
|
|
|
|
# The following examples are for QNAP NAS running QTS 4.2
|
|
|
|
|
# export ACME_DEPLOY_SSH_USER="admin"
|
|
|
|
|
# export ACME_DEPLOY_SSH_URL="qnap"
|
|
|
|
|
# export ACME_DEPLOY_SSH_SERVER="qnap"
|
|
|
|
|
# export ACME_DEPLOY_SSH_PORT="22"
|
|
|
|
|
# export ACME_DEPLOY_SSH_SERVICE_STOP=""
|
|
|
|
|
# export ACME_DEPLOY_SSH_KEYFILE="/etc/stunnel/stunnel.pem"
|
|
|
|
|
# export ACME_DEPLOY_SSH_CERTFILE="/etc/stunnel/stunnel.pem"
|
|
|
|
@ -34,7 +35,7 @@ sshdeploy_deploy() {
|
|
|
|
|
_cmdstr=""
|
|
|
|
|
_homedir='~'
|
|
|
|
|
_backupprefix="$_homedir/.acme_ssh_deploy/certs-backup"
|
|
|
|
|
_backupdir="$_backupprefix-$(date +%Y%m%d%H%M%S)"
|
|
|
|
|
_backupdir="$_backupprefix-$(_utc_date | tr ' ' '-')"
|
|
|
|
|
|
|
|
|
|
if [ -f "$DOMAIN_CONF" ]; then
|
|
|
|
|
# shellcheck disable=SC1090
|
|
|
|
@ -58,15 +59,23 @@ sshdeploy_deploy() {
|
|
|
|
|
_savedomainconf Le_Deploy_ssh_user "$Le_Deploy_ssh_user"
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
# URL is optional. If not provided then use _cdomain
|
|
|
|
|
if [ -n "$ACME_DEPLOY_SSH_URL" ]; then
|
|
|
|
|
Le_Deploy_ssh_url="$ACME_DEPLOY_SSH_URL"
|
|
|
|
|
_savedomainconf Le_Deploy_ssh_url "$Le_Deploy_ssh_url"
|
|
|
|
|
elif [ -z "$Le_Deploy_ssh_url" ]; then
|
|
|
|
|
Le_Deploy_ssh_url="$_cdomain"
|
|
|
|
|
# SERVER is optional. If not provided then use _cdomain
|
|
|
|
|
if [ -n "$ACME_DEPLOY_SSH_SERVER" ]; then
|
|
|
|
|
Le_Deploy_ssh_server="$ACME_DEPLOY_SSH_SERVER"
|
|
|
|
|
_savedomainconf Le_Deploy_ssh_server "$Le_Deploy_ssh_server"
|
|
|
|
|
elif [ -z "$Le_Deploy_ssh_server" ]; then
|
|
|
|
|
Le_Deploy_ssh_server="$_cdomain"
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
_info "Deploy certificates to remote server $Le_Deploy_ssh_user@$Le_Deploy_ssh_url"
|
|
|
|
|
# PORT is optional. If not provided then use port 22
|
|
|
|
|
if [ -n "$ACME_DEPLOY_SSH_PORT" ]; then
|
|
|
|
|
Le_Deploy_ssh_port="$ACME_DEPLOY_SSH_PORT"
|
|
|
|
|
_savedomainconf Le_Deploy_ssh_port "$Le_Deploy_ssh_port"
|
|
|
|
|
elif [ -z "$Le_Deploy_ssh_port" ]; then
|
|
|
|
|
Le_Deploy_ssh_port="22"
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
_info "Deploy certificates to remote server $Le_Deploy_ssh_user@$Le_Deploy_ssh_server on port $Le_Deploy_ssh_port"
|
|
|
|
|
|
|
|
|
|
# SERVICE_STOP is optional.
|
|
|
|
|
# If provided then this command will be executed on remote host.
|
|
|
|
@ -190,7 +199,7 @@ sshdeploy_deploy() {
|
|
|
|
|
_info "Submitting sequence of commands to remote server by ssh"
|
|
|
|
|
# quotations in bash cmd below intended. Squash travis spellcheck error
|
|
|
|
|
# shellcheck disable=SC2029
|
|
|
|
|
ssh -T "$Le_Deploy_ssh_user@$Le_Deploy_ssh_url" bash -c "'$_cmdstr'"
|
|
|
|
|
ssh -T -p "$Le_Deploy_ssh_port" "$Le_Deploy_ssh_user@$Le_Deploy_ssh_server" sh -c "'$_cmdstr'"
|
|
|
|
|
|
|
|
|
|
return 0
|
|
|
|
|
return $?
|
|
|
|
|
}
|
|
|
|
|