68e3a12a91
feat: improve robustness of the usage of DSM tool `synogroup`
11 months ago
50eda6b678
fix: lint
11 months ago
192ec598a3
feat: add `SYNO_LOCAL_HOSTNAME` to prevent remote deploy via temp admin method
11 months ago
5b449999a5
refactor: unify variable naming convention again (revert some changes)
11 months ago
afed62f6de
fix: should save `SYNO_UseTempAdmin` only after login success.
11 months ago
59d1e16f9c
feat: bypass enforce temp admin 2FA
11 months ago
dbe0d477d6
feat: more user-friendly logic & error messages.
11 months ago
7248560169
feat: support DSM 6.x
11 months ago
f840f7d75b
refactor: unify variable naming convention
11 months ago
cf3839ecec
doc(deploy): update usage doc
11 months ago
aa8cf76fb1
Merge pull request #4706 from scruel/syno-patch
...
Add SYNO_USE_TEMP_ADMIN variable & Fix broken logic
12 months ago
2e58cf1168
Merge pull request #4940 from dario-pilori/fix-routeros-7
...
Fix RouterOS deploy hook for 7
1 year ago
3ca97d7258
Remove whitespace in script name in routeros.sh deploy hook
1 year ago
6992659ba9
Update synology_dsm.sh
1 year ago
05696d443a
Update synology_dsm.sh
...
#2727 issue when logging out on older version - using variables to unlog only for CERT user
1 year ago
f59a925897
Update synology_dsm.sh
...
Issue for lougout
1 year ago
e09d45c844
haproxy; don't use '*' in the filename for wildcard domain
...
By default acme.sh uses the '*' character in the filename for wildcard.
That can be confusing within HAProxy since the * character in front of a
filename in the stat socket is used to specified an uncommitted
transaction.
This patch replace the '*' by a '_' in the filename.
This is only done when using the default filename, the name can still be
forced with an asterisk.
1 year ago
36fc321096
haproxy: use the master CLI for hot update
...
DEPLOY_HAPROXY_MASTER_CLI allows to use the HAProxy master CLI instead
of a stats socket for DEPLOY_HAPROXY_HOT_UPDATE="yes"
The syntax of the master CLI is slightly different, a prefix with the
process number need to be added before any command.
This patch uses ${_cmdpfx} in front of every socat commands which is
filled when the master CLI is used.
1 year ago
98a7a01dbb
haproxy: deploy script can add a new certificate over the stats socket
...
DEPLOY_HAPROXY_HOT_UPDATE="yes" now allows to add a new certificate
within HAProxy instead of updating an existing one.
In order to work, the ${DEPLOY_HAPROXY_PEM_PATH} value must be used as a
parameter to the "crt" keyword in the haproxy configuration.
The patch uses the following commands over HAProxy stats socket:
- show ssl cert
- new ssl cert
- set ssl cert
- commit ssl cert
- add ssl crt-list
1 year ago
0f7be90500
haproxy: deploy script can update existing certificate over stats socket
...
Since version 2.2, HAProxy is able to update dynamically certificates,
without a reload.
This patch uses socat to push the certificate into HAProxy in order to
achieve hot update. With this method, reloading is not required.
This should be used only to update an existing certificate in haproxy.
2 new variables are available:
- DEPLOY_HAPROXY_HOT_UPDATE="yes" update over the stats socket instead
of reloading
- DEPLOY_HAPROXY_STATS_SOCKET="UNIX:/run/haproxy/admin.sock" set the path on
the stats socket.
1 year ago
7aaf4432d4
haproxy: sanitize the PEM in the deploy script
...
Sanitize the PEM of the haproxy deploy script by removing the '\n', this
way it could be injected directly over the CLI.
1 year ago
884a8995b4
Merge pull request #4853 from Max13/deploy/proxmoxve
...
Fix typo in proxmoxve deploy hook
1 year ago
00dbc3881f
Fixed variables
1 year ago
8ca5ca6594
Update haproxy.sh
...
resolved issue with HAProxy https://github.com/acmesh-official/acme.sh/issues/4788
according https://serversforhackers.com/c/letsencrypt-with-haproxy
1 year ago
ed72b090af
deploy hook for Ruckus ZoneDirector / Unleashed
1 year ago
87a7bde618
fix: Synology DSM API path regex
...
Fix the regex for looking up the API path value from the Synology API query.
1 year ago
29b2960805
Optimze comment & remove tail space
1 year ago
f7f3a0bf0d
Merge branch 'dev' into syno-patch
1 year ago
b793dbf977
Fix device ID property name for DSM 6
1 year ago
d52b38777a
Fix Auth API access for DSM 6
2 years ago
ba468bb5e4
Fix for shfmt check
2 years ago
cf86d57a9f
Fix for shfmt check
2 years ago
9e958f4e32
Fix shellcheck
2 years ago
c7f6f20c9d
Add SYNO_USE_TEMP_ADMIN variable & Fix broken logic
...
1. Fix the broken logic in (Sorry for including fix commit in same PR, I'm feeling quite tired and would like to go to sleep right away...)
2. Provides new method to obtain credential info for authentication, it will create a temp admin user if SYNO_USE_TEMP_ADMIN is set, instead of requiring the user's own credentials which will be saved in disk.
I do really don't like to have plaintext credentials be saved in disk, and I noticed that you've spent a lot of time fighting with 2FA related stuffs, so why not just get rid of the whole old way. :)
2 years ago
1984f44ffe
Shell formatting
2 years ago
02de281e40
Removed unused variable
2 years ago
ae035deb92
Fixed shell check errors
2 years ago
edd1b60c3d
Removed ability to specify API key to facilitate future multiple host functionality.
2 years ago
62a2ce1d35
Merge remote-tracking branch 'upstream/dev' into panos-ecc-fix
2 years ago
b556908cab
Modified ECC file test
2 years ago
e69a19db5c
Incorporated partial commit to address issue #4198
2 years ago
d86414febb
Excluded scopes for api key test
2 years ago
832318fab1
Merge remote-tracking branch 'upstream/master' into panos-ecc-fix
2 years ago
0d7b831661
Fix variable initialization
2 years ago
0c9e4f67a8
Update synology_dsm.sh
...
Split "[ && ]" into "[ ] && [ ]" to make ShellCheck happy
2 years ago
db3f131dfc
Re-add deprecated SYNO_TOTP_SECRET part for legacy compatibility
...
As requested in acmesh-official/acme.sh/pull/4646 by Neil Pang
2 years ago
d7f58c64f8
Merge branch 'acmesh-official:master' into patch-1
2 years ago
0548ad2fc6
Fix debug output of session ID
2 years ago
623d615cd7
Remove external OTP dependency from synology_dsm.sh
...
Also adapt to DSM 7's API improvements.
2 years ago
126df9647b
Modified keytest to perform a partial empty commit
2 years ago
2e2e7cd054
Added ability to force commit to firewall. Username is now also mandatory
2 years ago
0ebc9f7a44
Fixed typo
2 years ago
a8fba65cbd
Cleaned up verbiage. Added ability to store / update user variable. Added ability to use user/pass OR key
2 years ago
7623025b90
Fixes for POSIX sh shell
2 years ago
b937665b90
minor
2 years ago
a7bc2293c0
fix https://github.com/acmesh-official/acme.sh/issues/4612#issuecomment-1518929996
2 years ago
df753e2619
Added functionality to save and reuse API key
2 years ago
cbb7082afd
Fixed bug with wildcard certs and ecc keys
2 years ago
2690c05781
fix format
2 years ago
e3b688c9d8
fix format
2 years ago
41b6f18a5d
fix format
2 years ago
5a59c39036
fix format
2 years ago
a02dd18ad7
Merge pull request #4414 from beartom/master
...
Update truenas.sh to deploy certificate for TrueCharts
2 years ago
40002e8040
Merge pull request #4447 from PMExtra/feature/vault
...
improve vault and vault_cli deployhooks
2 years ago
ffed1a4afa
Merge pull request #4468 from DreamOfIce/master
...
Update deploy script for gcore
2 years ago
1bfd3642e8
Update gcore_cdn.sh
2 years ago
1ccfa96c2e
improve logging
2 years ago
ed63eb6833
migrate FABIO to VAULT_FABIO_MODE and persist it
2 years ago
b8d0d3c242
improve chain.pem exists evaluating
2 years ago
fe1bfe9ae1
improve vault and vault_api deployhooks
2 years ago
63869deeb2
Merge pull request #4091 from PMExtra/feature/ssh_scp
...
Refact ssh hook to use deploy config, support scp and support specifying port
2 years ago
bd2d0e6ad3
Format
...
Format
2 years ago
04a5d794ac
Update truenas.sh for certificate in chart release
...
Update certificate in chart release of TrueCharts if any chart release Apps is using the same certificate as TrueNAS web UI.
2 years ago
e275cb1efd
fix shellcheck warnings
2 years ago
60315e5b91
fix shellcheck warnings
2 years ago
6c8a623b88
Merge pull request #4329 from lippertmarkus/patch-1
...
[Deploy: synology_dsm] Make usage of DID with 2FA working for DSM 7
2 years ago
e02f07d356
add parked_domans
2 years ago
2c90d220b8
Updated comment to reflect the change to function
2 years ago
a7dd86de71
fix(deploy-synology_dsm): support DID with DSM 7
2 years ago
c541a2e5de
add addon_domans
2 years ago
b44ba0d21a
Add wildcard deployment to cpanel_uapi
2 years ago
afc0097b12
Merge pull request #4139 from wsellitti/proxmoxve
...
deploy api script to upload certs to proxmox using proxmox api
3 years ago
4e9f971c91
Merge pull request #4170 from SecT0uch/patch-1
...
Fix ecc certificates
3 years ago
41801a60ad
Also restart postfix
3 years ago
2cbf1259a8
Fix for ECC certificates
3 years ago
9b79743c5d
Update proxmoxve.sh
3 years ago
a386826808
Update proxmoxve.sh
3 years ago
668894fc4d
Update proxmoxve.sh
3 years ago
799f509ba9
typo
3 years ago
b3b4811b2c
added savedeployconf to preserve environment variables usedi in initial deployments
3 years ago
966e4246e5
Merge branch 'proxmoxve' of gitlab.lan.home.wesitcllc.com:software/upstream/acme.sh into proxmoxve
3 years ago
9377c4f3ad
Merge branch 'proxmoxve' of github.com:wsellitti/acme.sh into proxmoxve
3 years ago
b876128635
forced content-type to json
3 years ago
c0da801580
Revert "'+' are being converted to ' ' at some point"
...
This reverts commit 149310e1ec
3 years ago
149310e1ec
'+' are being converted to ' ' at some point
3 years ago
4e625c18dc
Revert "seems like the escaped new lines aren't remaining escaped new lines with the new version of curl"
...
This reverts commit a5d5113be3
3 years ago
a5d5113be3
seems like the escaped new lines aren't remaining escaped new lines with the new version of curl
3 years ago
7900c493af
debugging for the payload
3 years ago
76fe5d8831
those where flipped by mistake
3 years ago
37031721dd
typo
3 years ago
Scruel Tao
neil
Dario Pilori
LordDarkneo
William Lallemand
William Lallemand
Adnan RIHAN
podguzovvasily
Keith Chiem
Romeo Dumitrescu
Martin Arndt
sg1888
冰雪殇璃陌梦
PMExtra
beartom
sasburg
Markus Lippert
srirams
Danny Tix
Ry3nlNaToR
Jordan ERNST
William Sellitti