linting

renew_cert.sh

@@ -1,29 +1,36 @@
 #!/bin/sh
 
-base_dir="/etc/ssl/nginx"
-_EUID="$(id -u)"
+PATH="$PATH:/sbin"
+
+service=$1
+fqdn=$2
 
 die() {
 	echo "$@" >&2
 	exit 1
 }
 
+if [ -z "${service}" ] || [ -z ${fqdn} ]; then
+	die "service and fqdn have to be set"
+fi
 
-openssl x509 -checkend 2678400 -noout -in $base_dir/$1.crt
+base_dir="/etc/ssl/${service}"
+
+openssl x509 -checkend 2678400 -noout -in $base_dir/${fqdn}.crt
 if [ $? = 0 ]; then
-        exit 1
+        exit 0
 else
-	mv $base_dir/$1.crt $base_dir/$1.crt.bak-$(date +%F)
-	mv $base_dir/$1.chained.crt \
-		$base_dir/$1.chained.crt-$(date +%F)
+	mv $base_dir/${fqdn}.crt $base_dir/${fqdn}.crt.bak-$(date +%F)
+	mv $base_dir/${fqdn}-chained.crt \
+		$base_dir/${fqdn}-chained.crt-$(date +%F)
 	certbot certonly \
-		--csr $base_dir/$1.csr \
-		--cert-path $base_dir/$1.crt \
-		--chain-path $base_dir/$1.chained.crt \
+		--csr $base_dir/${fqdn}.csr \
+		--cert-path $base_dir/${fqdn}.crt \
+		--chain-path $base_dir/${fqdn}-chained.crt \
 		--webroot \
-		-w /usr/local/www/le-challenges/ \
+		-w /var/www/le-challenges/ \
 		--agree-tos \
 		--register-unsafely-without-email || die "Error while signing certificate"
-	mv 0000_chain.pem $base_dir/$1-chained.crt
-	sudo service nginx reload
+	mv 0000_chain.pem $base_dir/${fqdn}-chained.crt
+	rc-service ${service} reload
 fi