From: Christian Heller Date: Thu, 29 Nov 2018 23:39:55 +0000 (+0100) Subject: Reduce scope of letsencrypt.sh script. X-Git-Url: https://plomlompom.com/repos/%7B%7Bprefix%7D%7D/tasks?a=commitdiff_plain;h=dbb2ad6d064a1037213d4631729c08953d43ed87;p=config Reduce scope of letsencrypt.sh script. --- diff --git a/all_new_2018/letsencrypt.sh b/all_new_2018/letsencrypt.sh index 2e6a03b..18f9aa4 100755 --- a/all_new_2018/letsencrypt.sh +++ b/all_new_2018/letsencrypt.sh @@ -2,13 +2,7 @@ # Install or copy LetsEncrypt certificates on/from server. # # First argument: server -# Second argument: either "set" or "get" or "put" -# -# "set" install certbot on remote server and requests a new certificate -# for it. This needs two more arguments: an e-mail address for future -# communication with LetsEncrypt, and the domain for which to request -# the certificate (might plausibly be equivalent to the first argument -# though). This needs port 80 open on the server. +# Second argument: "get" or "put" # # "get" copies the server's /etc/letsencrypt to a local letsencrypt.tar. # @@ -27,16 +21,7 @@ action="$2" eval $(ssh-agent) ssh-add ~/.ssh/id_rsa -if [ "${action}" = "set" ]; then - # Install certificate. This needs port 80 open (443 does not work here). - if [ $# -lt 4 ]; then - echo "Need mail address and domain as arguments." - false - fi - mail="$3" - domain="$4" - ssh -t plom@${server} "su -c 'apt update && apt -y install certbot && certbot certonly --standalone --agree-tos -m ${mail} -d ${server}'" -elif [ "${action}" = "get" ]; then +if [ "${action}" = "get" ]; then # Get /etc/letsencrypt/ as tar file. ssh -t plom@${server} 'su -c "cd /etc/ && tar cf letsencrypt.tar letsencrypt && chown plom:plom letsencrypt.tar && mv letsencrypt.tar /home/plom/"' scp plom@${server}:~/letsencrypt.tar . @@ -45,6 +30,6 @@ elif [ "${action}" = "put" ]; then scp letsencrypt.tar plom@${server}:~/ ssh -t plom@${server} 'su -c "rmdir /etc/letsencrypt && mv letsencrypt.tar /etc/ && cd /etc/ && tar xf letsencrypt.tar && rm letsencrypt.tar"' else - echo "Action must be 'set', 'get', or 'put'." + echo "Action must be 'get', or 'put'." false fi