fix: upload existing LE certs to Zoraxy via API after deploy
This commit is contained in:
parent
13c1bd2d13
commit
b2e3086e10
1 changed files with 19 additions and 0 deletions
19
deploy.sh
19
deploy.sh
|
|
@ -294,6 +294,25 @@ EOF
|
||||||
-H "X-CSRF-Token: ${CSRF}" -d "enable=true" > /dev/null
|
-H "X-CSRF-Token: ${CSRF}" -d "enable=true" > /dev/null
|
||||||
echo " [OK] LE auto-renew enabled"
|
echo " [OK] LE auto-renew enabled"
|
||||||
|
|
||||||
|
# Upload existing certs to Zoraxy (so it registers them in sys.db)
|
||||||
|
echo " Uploading certificates to Zoraxy..."
|
||||||
|
CERTS_DIR="$TARGET_DIR/config/zoraxy/conf/certs"
|
||||||
|
for FQDN in app.${DOMAIN} dns.${DOMAIN} www.${DOMAIN}; do
|
||||||
|
CRT_FILE="$CERTS_DIR/${FQDN}.crt"
|
||||||
|
KEY_FILE="$CERTS_DIR/${FQDN}.key"
|
||||||
|
if [ -f "$CRT_FILE" ] && [ -f "$KEY_FILE" ]; then
|
||||||
|
CSRF=$(fetch_csrf)
|
||||||
|
curl -s -c "$COOKIE_JAR" -b "$COOKIE_JAR" -X POST "http://127.0.0.1:8000/api/cert/upload?ktype=pub&domain=${FQDN}" \
|
||||||
|
-H "X-CSRF-Token: ${CSRF}" \
|
||||||
|
--data-binary "@${CRT_FILE}" > /dev/null 2>&1 || true
|
||||||
|
CSRF=$(fetch_csrf)
|
||||||
|
curl -s -c "$COOKIE_JAR" -b "$COOKIE_JAR" -X POST "http://127.0.0.1:8000/api/cert/upload?ktype=pri&domain=${FQDN}" \
|
||||||
|
-H "X-CSRF-Token: ${CSRF}" \
|
||||||
|
--data-binary "@${KEY_FILE}" > /dev/null 2>&1 || true
|
||||||
|
echo " Uploaded cert for ${FQDN}"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
# BoltDB Zoraxy Auth gateway
|
# BoltDB Zoraxy Auth gateway
|
||||||
SYS_DB="$TARGET_DIR/data/zoraxy/sys.db"
|
SYS_DB="$TARGET_DIR/data/zoraxy/sys.db"
|
||||||
if [ -f "$SYS_DB" ] && [ -f "$TOOL_BIN" ]; then
|
if [ -f "$SYS_DB" ] && [ -f "$TOOL_BIN" ]; then
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue