lexton-it/NextWks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: request LE certs for all subdomains (app + dns) on greenfield

Browse source
This commit is contained in:
Claus Lohmar 2026-07-07 10:47:38 +01:00
parent 22471e479b
commit eabbcdaa2d
1 changed files with 14 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
deploy.sh
View file

@ -308,16 +308,20 @@ EOF
curl -s -b "$COOKIE_JAR" -X POST "http://127.0.0.1:8000/api/acme/autoRenew/email" \
-d "set=${TLS_EMAIL}" > /dev/null
# Obtain certificate (30s timeout — can hang if DNS doesn't resolve)
echo " Requesting LE certificate for app.${DOMAIN}..."
CERT_RESULT=$(curl -s --max-time 30 -b "$COOKIE_JAR" -X GET "http://127.0.0.1:8000/api/acme/obtainCert" \
-G -d "domains=app.${DOMAIN}" -d "filename=app.${DOMAIN}" \
-d "email=${TLS_EMAIL}" -d "ca=Let's Encrypt" -d "dns=false" 2>&1)
if echo "$CERT_RESULT" | grep -qi '"success"\|"ok"\|"installed'; then
echo " [OK] Certificate obtained for app.${DOMAIN}"
else
echo " [INFO] Certificate result: $CERT_RESULT (expected if DNS doesn't resolve yet)"
fi
# Obtain certificates for all subdomains (30s timeout each)
# URL-encode "Let's Encrypt" as Let%27s%20Encrypt to avoid curl parsing issues
LE_CA="Let%27s%20Encrypt"
for SUB in app dns; do
echo " Requesting LE certificate for ${SUB}.${DOMAIN}..."
CERT_RESULT=$(curl -s --max-time 30 -b "$COOKIE_JAR" -X GET "http://127.0.0.1:8000/api/acme/obtainCert" \
-G -d "domains=${SUB}.${DOMAIN}" -d "filename=${SUB}.${DOMAIN}" \
-d "email=${TLS_EMAIL}" -d "ca=${LE_CA}" -d "dns=false" 2>&1)
if echo "$CERT_RESULT" | grep -qi '"success"\|"ok"\|"installed'; then
echo " [OK] Certificate obtained for ${SUB}.${DOMAIN}"
else
echo " [INFO] ${SUB}.${DOMAIN}: $CERT_RESULT (expected if DNS doesn't resolve)"
fi
done
# Enable auto-renew
echo " Enabling auto-renew..."