mirror of
https://github.com/tiennm99/is-a-dev.git
synced 2026-05-14 08:58:25 +00:00
Akshay Nair
103 lines
2.8 KiB
Bash
Executable File
103 lines
2.8 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
export ENV=production
|
|
DRY_RUN=0
|
|
if_dry_run() { [[ $DRY_RUN == 1 ]] && echo "$1" || echo "$2"; }
|
|
|
|
generate_certificate() {
|
|
outdir=$(mktemp -d /tmp/is-a-dev-certbot.XXXXX);
|
|
|
|
certbot \
|
|
--config-dir $outdir/config \
|
|
--work-dir $outdir/work \
|
|
--logs-dir $outdir/logs \
|
|
certonly \
|
|
--manual \
|
|
-m 'phenax5@gmail.com' \
|
|
-d '*.is-a.dev,is-a.dev' \
|
|
$(if_dry_run "--dry-run" "");
|
|
|
|
echo "+-----------------------------------------------+";
|
|
echo "| Certificates output to: |";
|
|
echo "| $outdir |";
|
|
echo "+-----------------------------------------------+";
|
|
}
|
|
|
|
update_record() {
|
|
local method=$([[ "$1" == "add" ]] && echo "addZoneRecord" || echo "removeZoneRecord");
|
|
local type="$2";
|
|
local name="$3";
|
|
local address="$4";
|
|
local ttl=${5:-"1"};
|
|
echo "
|
|
const { domainService } = require('./utils/domain-service');
|
|
const { ENV, DOMAIN_DOMAIN } = require('./utils/constants');
|
|
const record = {
|
|
name: '$name',
|
|
type: '$type',
|
|
address: '$address',
|
|
ttl: $ttl,
|
|
};
|
|
console.log('Uploading $name to', DOMAIN_DOMAIN, '(', ENV, ')...');
|
|
domainService.$method(record)()
|
|
.then(d => console.log(d.cpanelresult ? d.cpanelresult.data : d))
|
|
.catch(console.error);
|
|
" | node -
|
|
}
|
|
|
|
update_acme_txt_record() {
|
|
update_record add TXT '_acme-challenge' "$1";
|
|
}
|
|
|
|
update_www_record() {
|
|
update_record remove CNAME 'www' "is-a-dev.github.io";
|
|
sleep 1;
|
|
update_record add A 'www' "68.65.123.44";
|
|
}
|
|
|
|
upload_acme_file() {
|
|
local key="$1";
|
|
local value="$2";
|
|
echo "
|
|
const { cpanel } = require('./utils/lib/cpanel');
|
|
const { ENV, DOMAIN_DOMAIN, DOMAIN_USER } = require('./utils/constants');
|
|
|
|
const file = {
|
|
dir: '/home/' + DOMAIN_USER + '/public_html/.well-known/acme-challenge',
|
|
file: '$key',
|
|
content: '$value',
|
|
};
|
|
|
|
console.log('Uploading acme validation file to', DOMAIN_DOMAIN, '(', ENV, ')...');
|
|
cpanel.file.write(file).then(console.log).catch(console.error);
|
|
" | node -;
|
|
}
|
|
|
|
reset_acme() {
|
|
update_record remove A 'www' "68.65.123.44";
|
|
sleep 1;
|
|
update_record add CNAME 'www' "is-a-dev.github.io";
|
|
}
|
|
|
|
case "$1" in
|
|
check)
|
|
echo "TXT record:: $(dig +noall +answer _acme-challenge.is-a.dev TXT | awk '{print $5}')";
|
|
;;
|
|
config_www) update_www_record ;;
|
|
acme_txt) update_acme_txt_record "$2" ;;
|
|
acme_file) upload_acme_file "$2" "$3" ;;
|
|
cert) generate_certificate ;;
|
|
reset) reset_acme ;;
|
|
*) echo "Invalid command"; exit 1; ;;
|
|
esac
|
|
|
|
|
|
### STEPS ###
|
|
# Run ./scripts/certbot.sh cert
|
|
# Run ./scripts/certbot.sh acme_txt "<key>"
|
|
# Run ./scripts/certbot.sh acme_file "<key>" "<value>"
|
|
# Run ./scripts/certbot.sh config_www
|
|
# Upload cert.pem and privkey.pem contents to SSL > Manage SSL Sites
|
|
# Run ./scripts/certbot.sh reset
|
|
|