mirror of
https://github.com/nextcloud/nextcloudpi.git
synced 2026-01-10 15:12:01 -03:30
120 lines
3.8 KiB
Bash
120 lines
3.8 KiB
Bash
#!/bin/bash
|
|
|
|
# Let's encrypt certbot installation on Raspbian
|
|
#
|
|
# Copyleft 2017 by Ignacio Nunez Hernanz <nacho _a_t_ ownyourbits _d_o_t_ com>
|
|
# GPL licensed (see end of file) * Use at your own risk!
|
|
#
|
|
# More at https://ownyourbits.com/2017/03/17/lets-encrypt-installer-for-apache/
|
|
|
|
|
|
NCDIR=/var/www/nextcloud
|
|
OCC="$NCDIR/occ"
|
|
VHOSTCFG=/etc/apache2/sites-available/nextcloud.conf
|
|
VHOSTCFG2=/etc/apache2/sites-available/ncp.conf
|
|
|
|
is_active()
|
|
{
|
|
[[ $( find /etc/letsencrypt/live/ -maxdepth 0 -empty | wc -l ) == 0 ]]
|
|
}
|
|
|
|
install()
|
|
{
|
|
cd /etc || return 1
|
|
apt-get update
|
|
apt-get install --no-install-recommends -y letsencrypt
|
|
mkdir -p /etc/letsencrypt/live
|
|
|
|
[[ "$DOCKERBUILD" == 1 ]] && {
|
|
# execute before lamp stack
|
|
cat > /etc/services-available.d/009letsencrypt <<EOF
|
|
#!/bin/bash
|
|
|
|
source /usr/local/etc/library.sh
|
|
persistent_cfg /etc/letsencrypt
|
|
|
|
exit 0
|
|
EOF
|
|
chmod +x /etc/services-available.d/009letsencrypt
|
|
}
|
|
return 0
|
|
}
|
|
|
|
# tested with certbot 0.10.2
|
|
configure()
|
|
{
|
|
local DOMAIN_LOWERCASE="${DOMAIN,,}"
|
|
|
|
[[ "$DOMAIN" == "" ]] && { echo "empty domain"; return 1; }
|
|
|
|
# Configure Apache
|
|
grep -q ServerName $VHOSTCFG && \
|
|
sed -i "s|ServerName .*|ServerName $DOMAIN|" $VHOSTCFG || \
|
|
sed -i "/DocumentRoot/aServerName $DOMAIN" $VHOSTCFG
|
|
|
|
# Do it
|
|
letsencrypt certonly -n --no-self-upgrade --webroot -w $NCDIR --hsts --agree-tos -m $EMAIL -d $DOMAIN && {
|
|
|
|
# Set up auto-renewal
|
|
cat > /etc/cron.weekly/letsencrypt-ncp <<EOF
|
|
#!/bin/bash
|
|
|
|
# renew and notify
|
|
/usr/bin/certbot renew --quiet --renew-hook '
|
|
sudo -u www-data php $OCC notification:generate \
|
|
$NOTIFYUSER "SSL renewal" \
|
|
-l "Your SSL certificate(s) \$RENEWED_DOMAINS has been renewed for another 90 days"
|
|
'
|
|
|
|
# notify if fails
|
|
[[ \$? -ne 0 ]] && sudo -u www-data php $OCC notification:generate \
|
|
$NOTIFYUSER "SSL renewal error" \
|
|
-l "SSL certificate renewal failed. See /var/log/letsencrypt/letsencrypt.log"
|
|
|
|
# cleanup
|
|
rm -rf $NCDIR/.well-known
|
|
EOF
|
|
chmod +x /etc/cron.weekly/letsencrypt-ncp
|
|
|
|
# Configure Apache
|
|
sed -i "s|SSLCertificateFile.*|SSLCertificateFile /etc/letsencrypt/live/$DOMAIN_LOWERCASE/fullchain.pem|" $VHOSTCFG
|
|
sed -i "s|SSLCertificateKeyFile.*|SSLCertificateKeyFile /etc/letsencrypt/live/$DOMAIN_LOWERCASE/privkey.pem|" $VHOSTCFG
|
|
|
|
sed -i "s|SSLCertificateFile.*|SSLCertificateFile /etc/letsencrypt/live/$DOMAIN_LOWERCASE/fullchain.pem|" $VHOSTCFG2
|
|
sed -i "s|SSLCertificateKeyFile.*|SSLCertificateKeyFile /etc/letsencrypt/live/$DOMAIN_LOWERCASE/privkey.pem|" $VHOSTCFG2
|
|
|
|
# Configure Nextcloud
|
|
sudo -u www-data php $OCC config:system:set trusted_domains 4 --value=$DOMAIN
|
|
sudo -u www-data php $OCC config:system:set overwrite.cli.url --value=https://"$DOMAIN"/
|
|
|
|
# delayed in bg so it does not kill the connection, and we get AJAX response
|
|
bash -c "sleep 2 && service apache2 reload" &>/dev/null &
|
|
rm -rf $NCDIR/.well-known
|
|
|
|
# Update configuration
|
|
[[ "$DOCKERBUILD" == 1 ]] && update-rc.d letsencrypt enable
|
|
|
|
return 0
|
|
}
|
|
rm -rf $NCDIR/.well-known
|
|
return 1
|
|
}
|
|
|
|
# License
|
|
#
|
|
# This script is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This script is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this script; if not, write to the
|
|
# Free Software Foundation, Inc., 59 Temple Place, Suite 330,
|
|
# Boston, MA 02111-1307 USA
|
|
|