graphene-os-server-infrastr.../deploy-certbot
2025-11-03 00:33:30 -05:00

22 lines
579 B
Bash
Executable file

#!/bin/bash
. shared.sh
. hosts.sh
for host in ${hosts_certbot[@]}; do
remote=root@$host
echo
echo $host
echo
rsync etc/logrotate.d/letsencrypt $remote:/etc/logrotate.d/
ssh $remote mkdir -p etc/systemd/system/certbot-renew.service.d
rsync etc/systemd/system/certbot-renew.service.d/override.conf $remote:/etc/systemd/system/certbot-renew.service.d/override.conf
ssh $remote "systemctl daemon-reload &&
systemctl enable --now certbot-renew.timer &&
mkdir -vp /srv/certbot &&
chmod -c 750 /srv/certbot &&
chown -c root:http /srv/certbot"
done