An | Anton Röhm
9 hours ago
committed by
GitHub
GitHub
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
19 changed files with 820 additions and 50 deletions
-
2.github/workflows/Linux.yml
-
2.github/workflows/PebbleStrict.yml
-
2Dockerfile
-
2README.md
-
108acme.sh
-
56deploy/cachefly.sh
-
86deploy/directadmin.sh
-
86deploy/edgio.sh
-
131deploy/keyhelp.sh
-
86deploy/keyhelp_api.sh
-
69deploy/netlify.sh
-
32deploy/truenas_ws.sh
-
6deploy/unifi.sh
-
4dnsapi/dns_curanet.sh
-
16dnsapi/dns_opnsense.sh
-
2dnsapi/dns_ovh.sh
-
28notify/ntfy.sh
-
130notify/opsgenie.sh
-
4notify/telegram.sh
@ -0,0 +1,56 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
# Script to deploy certificate to CacheFly |
|||
# https://api.cachefly.com/api/2.5/docs#tag/Certificates/paths/~1certificates/post |
|||
|
|||
# This deployment required following variables |
|||
# export CACHEFLY_TOKEN="Your CacheFly API Token" |
|||
|
|||
# returns 0 means success, otherwise error. |
|||
|
|||
######## Public functions ##################### |
|||
|
|||
#domain keyfile certfile cafile fullchain |
|||
CACHEFLY_API_BASE="https://api.cachefly.com/api/2.5" |
|||
|
|||
cachefly_deploy() { |
|||
_cdomain="$1" |
|||
_ckey="$2" |
|||
_ccert="$3" |
|||
_cca="$4" |
|||
_cfullchain="$5" |
|||
|
|||
_debug _cdomain "$_cdomain" |
|||
_debug _ckey "$_ckey" |
|||
_debug _ccert "$_ccert" |
|||
_debug _cca "$_cca" |
|||
_debug _cfullchain "$_cfullchain" |
|||
|
|||
if [ -z "$CACHEFLY_TOKEN" ]; then |
|||
_err "CACHEFLY_TOKEN is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf CACHEFLY_TOKEN "$CACHEFLY_TOKEN" |
|||
fi |
|||
|
|||
_info "Deploying certificate to CacheFly..." |
|||
|
|||
## upload certificate |
|||
string_fullchain=$(sed 's/$/\\n/' "$_cfullchain" | tr -d '\n') |
|||
string_key=$(sed 's/$/\\n/' "$_ckey" | tr -d '\n') |
|||
|
|||
_request_body="{\"certificate\":\"$string_fullchain\",\"certificateKey\":\"$string_key\"}" |
|||
_debug _request_body "$_request_body" |
|||
_debug CACHEFLY_TOKEN "$CACHEFLY_TOKEN" |
|||
export _H1="Authorization: Bearer $CACHEFLY_TOKEN" |
|||
_response=$(_post "$_request_body" "$CACHEFLY_API_BASE/certificates" "" "POST" "application/json") |
|||
|
|||
if _contains "$_response" "message"; then |
|||
_err "Error in deploying $_cdomain certificate to CacheFly." |
|||
_err "$_response" |
|||
return 1 |
|||
fi |
|||
_debug response "$_response" |
|||
_info "Domain $_cdomain certificate successfully deployed to CacheFly." |
|||
return 0 |
|||
} |
|||
@ -0,0 +1,86 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
# Script to deploy certificate to DirectAdmin |
|||
# https://docs.directadmin.com/directadmin/customizing-workflow/api-all-about.html#creating-a-login-key |
|||
# https://docs.directadmin.com/changelog/version-1.24.4.html#cmd-api-catch-all-pop-passwords-frontpage-protected-dirs-ssl-certs |
|||
|
|||
# This deployment required following variables |
|||
# export DirectAdmin_SCHEME="https" # Optional, https or http, defaults to https |
|||
# export DirectAdmin_ENDPOINT="example.com:2222" |
|||
# export DirectAdmin_USERNAME="Your DirectAdmin Username" |
|||
# export DirectAdmin_KEY="Your DirectAdmin Login Key or Password" |
|||
# export DirectAdmin_MAIN_DOMAIN="Your DirectAdmin Main Domain, NOT Subdomain" |
|||
|
|||
# returns 0 means success, otherwise error. |
|||
|
|||
######## Public functions ##################### |
|||
|
|||
#domain keyfile certfile cafile fullchain |
|||
directadmin_deploy() { |
|||
_cdomain="$1" |
|||
_ckey="$2" |
|||
_ccert="$3" |
|||
_cca="$4" |
|||
_cfullchain="$5" |
|||
|
|||
_debug _cdomain "$_cdomain" |
|||
_debug _ckey "$_ckey" |
|||
_debug _ccert "$_ccert" |
|||
_debug _cca "$_cca" |
|||
_debug _cfullchain "$_cfullchain" |
|||
|
|||
if [ -z "$DirectAdmin_ENDPOINT" ]; then |
|||
_err "DirectAdmin_ENDPOINT is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf DirectAdmin_ENDPOINT "$DirectAdmin_ENDPOINT" |
|||
fi |
|||
if [ -z "$DirectAdmin_USERNAME" ]; then |
|||
_err "DirectAdmin_USERNAME is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf DirectAdmin_USERNAME "$DirectAdmin_USERNAME" |
|||
fi |
|||
if [ -z "$DirectAdmin_KEY" ]; then |
|||
_err "DirectAdmin_KEY is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf DirectAdmin_KEY "$DirectAdmin_KEY" |
|||
fi |
|||
if [ -z "$DirectAdmin_MAIN_DOMAIN" ]; then |
|||
_err "DirectAdmin_MAIN_DOMAIN is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf DirectAdmin_MAIN_DOMAIN "$DirectAdmin_MAIN_DOMAIN" |
|||
fi |
|||
|
|||
# Optional SCHEME |
|||
_getdeployconf DirectAdmin_SCHEME |
|||
# set default values for DirectAdmin_SCHEME |
|||
[ -n "${DirectAdmin_SCHEME}" ] || DirectAdmin_SCHEME="https" |
|||
|
|||
_info "Deploying certificate to DirectAdmin..." |
|||
|
|||
# upload certificate |
|||
string_cfullchain=$(sed 's/$/\\n/' "$_cfullchain" | tr -d '\n') |
|||
string_key=$(sed 's/$/\\n/' "$_ckey" | tr -d '\n') |
|||
|
|||
_request_body="{\"domain\":\"$DirectAdmin_MAIN_DOMAIN\",\"action\":\"save\",\"type\":\"paste\",\"certificate\":\"$string_key\n$string_cfullchain\n\"}" |
|||
_debug _request_body "$_request_body" |
|||
_debug DirectAdmin_ENDPOINT "$DirectAdmin_ENDPOINT" |
|||
_debug DirectAdmin_USERNAME "$DirectAdmin_USERNAME" |
|||
_debug DirectAdmin_KEY "$DirectAdmin_KEY" |
|||
_debug DirectAdmin_MAIN_DOMAIN "$DirectAdmin_MAIN_DOMAIN" |
|||
_response=$(_post "$_request_body" "$DirectAdmin_SCHEME://$DirectAdmin_USERNAME:$DirectAdmin_KEY@$DirectAdmin_ENDPOINT/CMD_API_SSL" "" "POST" "application/json") |
|||
|
|||
if _contains "$_response" "error=1"; then |
|||
_err "Error in deploying $_cdomain certificate to DirectAdmin Domain $DirectAdmin_MAIN_DOMAIN." |
|||
_err "$_response" |
|||
return 1 |
|||
fi |
|||
|
|||
_info "$_response" |
|||
_info "Domain $_cdomain certificate successfully deployed to DirectAdmin Domain $DirectAdmin_MAIN_DOMAIN." |
|||
|
|||
return 0 |
|||
} |
|||
@ -0,0 +1,86 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
# Here is a script to deploy cert to edgio using its API |
|||
# https://docs.edg.io/guides/v7/develop/rest_api/authentication |
|||
# https://docs.edg.io/rest_api/#tag/tls-certs/operation/postConfigV01TlsCerts |
|||
|
|||
# This deployment required following variables |
|||
# export EDGIO_CLIENT_ID="Your Edgio Client ID" |
|||
# export EDGIO_CLIENT_SECRET="Your Edgio Client Secret" |
|||
# export EDGIO_ENVIRONMENT_ID="Your Edgio Environment ID" |
|||
|
|||
# If have more than one Environment ID |
|||
# export EDGIO_ENVIRONMENT_ID="ENVIRONMENT_ID_1 ENVIRONMENT_ID_2" |
|||
|
|||
# returns 0 means success, otherwise error. |
|||
|
|||
######## Public functions ##################### |
|||
|
|||
#domain keyfile certfile cafile fullchain |
|||
edgio_deploy() { |
|||
_cdomain="$1" |
|||
_ckey="$2" |
|||
_ccert="$3" |
|||
_cca="$4" |
|||
_cfullchain="$5" |
|||
|
|||
_debug _cdomain "$_cdomain" |
|||
_debug _ckey "$_ckey" |
|||
_debug _ccert "$_ccert" |
|||
_debug _cca "$_cca" |
|||
_debug _cfullchain "$_cfullchain" |
|||
|
|||
if [ -z "$EDGIO_CLIENT_ID" ]; then |
|||
_err "EDGIO_CLIENT_ID is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf EDGIO_CLIENT_ID "$EDGIO_CLIENT_ID" |
|||
fi |
|||
|
|||
if [ -z "$EDGIO_CLIENT_SECRET" ]; then |
|||
_err "EDGIO_CLIENT_SECRET is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf EDGIO_CLIENT_SECRET "$EDGIO_CLIENT_SECRET" |
|||
fi |
|||
|
|||
if [ -z "$EDGIO_ENVIRONMENT_ID" ]; then |
|||
_err "EDGIO_ENVIRONMENT_ID is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf EDGIO_ENVIRONMENT_ID "$EDGIO_ENVIRONMENT_ID" |
|||
fi |
|||
|
|||
_info "Getting access token" |
|||
_data="client_id=$EDGIO_CLIENT_ID&client_secret=$EDGIO_CLIENT_SECRET&grant_type=client_credentials&scope=app.config" |
|||
_debug Get_access_token_data "$_data" |
|||
_response=$(_post "$_data" "https://id.edgio.app/connect/token" "" "POST" "application/x-www-form-urlencoded") |
|||
_debug Get_access_token_response "$_response" |
|||
_access_token=$(echo "$_response" | _json_decode | _egrep_o '"access_token":"[^"]*' | cut -d : -f 2 | tr -d '"') |
|||
_debug _access_token "$_access_token" |
|||
if [ -z "$_access_token" ]; then |
|||
_err "Error in getting access token" |
|||
return 1 |
|||
fi |
|||
|
|||
_info "Uploading certificate" |
|||
string_ccert=$(sed 's/$/\\n/' "$_ccert" | tr -d '\n') |
|||
string_cca=$(sed 's/$/\\n/' "$_cca" | tr -d '\n') |
|||
string_key=$(sed 's/$/\\n/' "$_ckey" | tr -d '\n') |
|||
|
|||
for ENVIRONMENT_ID in $EDGIO_ENVIRONMENT_ID; do |
|||
_data="{\"environment_id\":\"$ENVIRONMENT_ID\",\"primary_cert\":\"$string_ccert\",\"intermediate_cert\":\"$string_cca\",\"private_key\":\"$string_key\"}" |
|||
_debug Upload_certificate_data "$_data" |
|||
_H1="Authorization: Bearer $_access_token" |
|||
_response=$(_post "$_data" "https://edgioapis.com/config/v0.1/tls-certs" "" "POST" "application/json") |
|||
if _contains "$_response" "message"; then |
|||
_err "Error in deploying $_cdomain certificate to Edgio ENVIRONMENT_ID $ENVIRONMENT_ID." |
|||
_err "$_response" |
|||
return 1 |
|||
fi |
|||
_debug Upload_certificate_response "$_response" |
|||
_info "Domain $_cdomain certificate successfully deployed to Edgio ENVIRONMENT_ID $ENVIRONMENT_ID." |
|||
done |
|||
|
|||
return 0 |
|||
} |
|||
@ -0,0 +1,131 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
# Script to deploy certificate to KeyHelp |
|||
# This deployment required following variables |
|||
# export DEPLOY_KEYHELP_BASEURL="https://keyhelp.example.com" |
|||
# export DEPLOY_KEYHELP_USERNAME="Your KeyHelp Username" |
|||
# export DEPLOY_KEYHELP_PASSWORD="Your KeyHelp Password" |
|||
# export DEPLOY_KEYHELP_DOMAIN_ID="Depoly certificate to this Domain ID" |
|||
|
|||
# Open the 'Edit domain' page, and you will see id=xxx at the end of the URL. This is the Domain ID. |
|||
# https://DEPLOY_KEYHELP_BASEURL/index.php?page=domains&action=edit&id=xxx |
|||
|
|||
# If have more than one domain name |
|||
# export DEPLOY_KEYHELP_DOMAIN_ID="111 222 333" |
|||
|
|||
keyhelp_deploy() { |
|||
_cdomain="$1" |
|||
_ckey="$2" |
|||
_ccert="$3" |
|||
_cca="$4" |
|||
_cfullchain="$5" |
|||
|
|||
_debug _cdomain "$_cdomain" |
|||
_debug _ckey "$_ckey" |
|||
_debug _ccert "$_ccert" |
|||
_debug _cca "$_cca" |
|||
_debug _cfullchain "$_cfullchain" |
|||
|
|||
if [ -z "$DEPLOY_KEYHELP_BASEURL" ]; then |
|||
_err "DEPLOY_KEYHELP_BASEURL is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf DEPLOY_KEYHELP_BASEURL "$DEPLOY_KEYHELP_BASEURL" |
|||
fi |
|||
|
|||
if [ -z "$DEPLOY_KEYHELP_USERNAME" ]; then |
|||
_err "DEPLOY_KEYHELP_USERNAME is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf DEPLOY_KEYHELP_USERNAME "$DEPLOY_KEYHELP_USERNAME" |
|||
fi |
|||
|
|||
if [ -z "$DEPLOY_KEYHELP_PASSWORD" ]; then |
|||
_err "DEPLOY_KEYHELP_PASSWORD is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf DEPLOY_KEYHELP_PASSWORD "$DEPLOY_KEYHELP_PASSWORD" |
|||
fi |
|||
|
|||
if [ -z "$DEPLOY_KEYHELP_DOMAIN_ID" ]; then |
|||
_err "DEPLOY_KEYHELP_DOMAIN_ID is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf DEPLOY_KEYHELP_DOMAIN_ID "$DEPLOY_KEYHELP_DOMAIN_ID" |
|||
fi |
|||
|
|||
# Optional DEPLOY_KEYHELP_ENFORCE_HTTPS |
|||
_getdeployconf DEPLOY_KEYHELP_ENFORCE_HTTPS |
|||
# set default values for DEPLOY_KEYHELP_ENFORCE_HTTPS |
|||
[ -n "${DEPLOY_KEYHELP_ENFORCE_HTTPS}" ] || DEPLOY_KEYHELP_ENFORCE_HTTPS="1" |
|||
|
|||
_info "Logging in to keyhelp panel" |
|||
username_encoded="$(printf "%s" "${DEPLOY_KEYHELP_USERNAME}" | _url_encode)" |
|||
password_encoded="$(printf "%s" "${DEPLOY_KEYHELP_PASSWORD}" | _url_encode)" |
|||
_H1="Content-Type: application/x-www-form-urlencoded" |
|||
_response=$(_get "$DEPLOY_KEYHELP_BASEURL/index.php?submit=1&username=$username_encoded&password=$password_encoded" "TRUE") |
|||
_cookie="$(grep -i '^set-cookie:' "$HTTP_HEADER" | _head_n 1 | cut -d " " -f 2)" |
|||
|
|||
# If cookies is not empty then logon successful |
|||
if [ -z "$_cookie" ]; then |
|||
_err "Fail to get cookie." |
|||
return 1 |
|||
fi |
|||
_debug "cookie" "$_cookie" |
|||
|
|||
_info "Uploading certificate" |
|||
_date=$(date +"%Y%m%d") |
|||
encoded_key="$(_url_encode <"$_ckey")" |
|||
encoded_ccert="$(_url_encode <"$_ccert")" |
|||
encoded_cca="$(_url_encode <"$_cca")" |
|||
certificate_name="$_cdomain-$_date" |
|||
|
|||
_request_body="submit=1&certificate_name=$certificate_name&add_type=upload&text_private_key=$encoded_key&text_certificate=$encoded_ccert&text_ca_certificate=$encoded_cca" |
|||
_H1="Cookie: $_cookie" |
|||
_response=$(_post "$_request_body" "$DEPLOY_KEYHELP_BASEURL/index.php?page=ssl_certificates&action=add" "" "POST") |
|||
_message=$(echo "$_response" | grep -A 2 'message-body' | sed -n '/<div class="message-body ">/,/<\/div>/{//!p;}' | sed 's/<[^>]*>//g' | sed 's/^ *//;s/ *$//') |
|||
_info "_message" "$_message" |
|||
if [ -z "$_message" ]; then |
|||
_err "Fail to upload certificate." |
|||
return 1 |
|||
fi |
|||
|
|||
for DOMAIN_ID in $DEPLOY_KEYHELP_DOMAIN_ID; do |
|||
_info "Apply certificate to domain id $DOMAIN_ID" |
|||
_response=$(_get "$DEPLOY_KEYHELP_BASEURL/index.php?page=domains&action=edit&id=$DOMAIN_ID") |
|||
cert_value=$(echo "$_response" | grep "$certificate_name" | sed -n 's/.*value="\([^"]*\).*/\1/p') |
|||
target_type=$(echo "$_response" | grep 'target_type' | grep 'checked' | sed -n 's/.*value="\([^"]*\).*/\1/p') |
|||
if [ "$target_type" = "directory" ]; then |
|||
path=$(echo "$_response" | awk '/name="path"/{getline; print}' | sed -n 's/.*value="\([^"]*\).*/\1/p') |
|||
fi |
|||
echo "$_response" | grep "is_prefer_https" | grep "checked" >/dev/null |
|||
if [ $? -eq 0 ]; then |
|||
is_prefer_https=1 |
|||
else |
|||
is_prefer_https=0 |
|||
fi |
|||
echo "$_response" | grep "hsts_enabled" | grep "checked" >/dev/null |
|||
if [ $? -eq 0 ]; then |
|||
hsts_enabled=1 |
|||
else |
|||
hsts_enabled=0 |
|||
fi |
|||
_debug "cert_value" "$cert_value" |
|||
if [ -z "$cert_value" ]; then |
|||
_err "Fail to get certificate id." |
|||
return 1 |
|||
fi |
|||
|
|||
_request_body="submit=1&id=$DOMAIN_ID&target_type=$target_type&path=$path&is_prefer_https=$is_prefer_https&hsts_enabled=$hsts_enabled&certificate_type=custom&certificate_id=$cert_value&enforce_https=$DEPLOY_KEYHELP_ENFORCE_HTTPS" |
|||
_response=$(_post "$_request_body" "$DEPLOY_KEYHELP_BASEURL/index.php?page=domains&action=edit" "" "POST") |
|||
_message=$(echo "$_response" | grep -A 2 'message-body' | sed -n '/<div class="message-body ">/,/<\/div>/{//!p;}' | sed 's/<[^>]*>//g' | sed 's/^ *//;s/ *$//') |
|||
_info "_message" "$_message" |
|||
if [ -z "$_message" ]; then |
|||
_err "Fail to apply certificate." |
|||
return 1 |
|||
fi |
|||
done |
|||
|
|||
_info "Domain $_cdomain certificate successfully deployed to KeyHelp Domain ID $DEPLOY_KEYHELP_DOMAIN_ID." |
|||
return 0 |
|||
} |
|||
@ -0,0 +1,86 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
keyhelp_api_deploy() { |
|||
_cdomain="$1" |
|||
_ckey="$2" |
|||
_ccert="$3" |
|||
_cca="$4" |
|||
|
|||
_debug _cdomain "$_cdomain" |
|||
_debug _ckey "$_ckey" |
|||
_debug _ccert "$_ccert" |
|||
_debug _cca "$_cca" |
|||
|
|||
# Read config from saved values or env |
|||
_getdeployconf DEPLOY_KEYHELP_HOST |
|||
_getdeployconf DEPLOY_KEYHELP_API_KEY |
|||
|
|||
_debug DEPLOY_KEYHELP_HOST "$DEPLOY_KEYHELP_HOST" |
|||
_secure_debug DEPLOY_KEYHELP_API_KEY "$DEPLOY_KEYHELP_API_KEY" |
|||
|
|||
if [ -z "$DEPLOY_KEYHELP_HOST" ]; then |
|||
_err "KeyHelp host not found, please define DEPLOY_KEYHELP_HOST." |
|||
return 1 |
|||
fi |
|||
if [ -z "$DEPLOY_KEYHELP_API_KEY" ]; then |
|||
_err "KeyHelp api key not found, please define DEPLOY_KEYHELP_API_KEY." |
|||
return 1 |
|||
fi |
|||
|
|||
# Save current values |
|||
_savedeployconf DEPLOY_KEYHELP_HOST "$DEPLOY_KEYHELP_HOST" |
|||
_savedeployconf DEPLOY_KEYHELP_API_KEY "$DEPLOY_KEYHELP_API_KEY" |
|||
|
|||
_request_key="$(tr '\n' ':' <"$_ckey" | sed 's/:/\\n/g')" |
|||
_request_cert="$(tr '\n' ':' <"$_ccert" | sed 's/:/\\n/g')" |
|||
_request_ca="$(tr '\n' ':' <"$_cca" | sed 's/:/\\n/g')" |
|||
|
|||
_request_body="{ |
|||
\"name\": \"$_cdomain\", |
|||
\"components\": { |
|||
\"private_key\": \"$_request_key\", |
|||
\"certificate\": \"$_request_cert\", |
|||
\"ca_certificate\": \"$_request_ca\" |
|||
} |
|||
}" |
|||
|
|||
_hosts="$(echo "$DEPLOY_KEYHELP_HOST" | tr "," " ")" |
|||
_keys="$(echo "$DEPLOY_KEYHELP_API_KEY" | tr "," " ")" |
|||
_i=1 |
|||
|
|||
for _host in $_hosts; do |
|||
_key="$(_getfield "$_keys" "$_i" " ")" |
|||
_i="$(_math "$_i" + 1)" |
|||
|
|||
export _H1="X-API-Key: $_key" |
|||
|
|||
_put_url="$_host/api/v2/certificates/name/$_cdomain" |
|||
if _post "$_request_body" "$_put_url" "" "PUT" "application/json" >/dev/null; then |
|||
_code="$(grep "^HTTP" "$HTTP_HEADER" | _tail_n 1 | cut -d " " -f 2 | tr -d "\r\n")" |
|||
else |
|||
_err "Cannot make PUT request to $_put_url" |
|||
return 1 |
|||
fi |
|||
|
|||
if [ "$_code" = "404" ]; then |
|||
_info "$_cdomain not found, creating new entry at $_host" |
|||
|
|||
_post_url="$_host/api/v2/certificates" |
|||
if _post "$_request_body" "$_post_url" "" "POST" "application/json" >/dev/null; then |
|||
_code="$(grep "^HTTP" "$HTTP_HEADER" | _tail_n 1 | cut -d " " -f 2 | tr -d "\r\n")" |
|||
else |
|||
_err "Cannot make POST request to $_post_url" |
|||
return 1 |
|||
fi |
|||
fi |
|||
|
|||
if _startswith "$_code" "2"; then |
|||
_info "$_cdomain set at $_host" |
|||
else |
|||
_err "HTTP status code is $_code" |
|||
return 1 |
|||
fi |
|||
done |
|||
|
|||
return 0 |
|||
} |
|||
@ -0,0 +1,69 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
# Script to deploy certificate to Netlify |
|||
# https://docs.netlify.com/api/get-started/#authentication |
|||
# https://open-api.netlify.com/#tag/sniCertificate |
|||
|
|||
# This deployment required following variables |
|||
# export Netlify_ACCESS_TOKEN="Your Netlify Access Token" |
|||
# export Netlify_SITE_ID="Your Netlify Site ID" |
|||
|
|||
# If have more than one SITE ID |
|||
# export Netlify_SITE_ID="SITE_ID_1 SITE_ID_2" |
|||
|
|||
# returns 0 means success, otherwise error. |
|||
|
|||
######## Public functions ##################### |
|||
|
|||
#domain keyfile certfile cafile fullchain |
|||
netlify_deploy() { |
|||
_cdomain="$1" |
|||
_ckey="$2" |
|||
_ccert="$3" |
|||
_cca="$4" |
|||
_cfullchain="$5" |
|||
|
|||
_debug _cdomain "$_cdomain" |
|||
_debug _ckey "$_ckey" |
|||
_debug _ccert "$_ccert" |
|||
_debug _cca "$_cca" |
|||
_debug _cfullchain "$_cfullchain" |
|||
|
|||
if [ -z "$Netlify_ACCESS_TOKEN" ]; then |
|||
_err "Netlify_ACCESS_TOKEN is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf Netlify_ACCESS_TOKEN "$Netlify_ACCESS_TOKEN" |
|||
fi |
|||
if [ -z "$Netlify_SITE_ID" ]; then |
|||
_err "Netlify_SITE_ID is not defined." |
|||
return 1 |
|||
else |
|||
_savedomainconf Netlify_SITE_ID "$Netlify_SITE_ID" |
|||
fi |
|||
|
|||
_info "Deploying certificate to Netlify..." |
|||
|
|||
## upload certificate |
|||
string_ccert=$(sed 's/$/\\n/' "$_ccert" | tr -d '\n') |
|||
string_cca=$(sed 's/$/\\n/' "$_cca" | tr -d '\n') |
|||
string_key=$(sed 's/$/\\n/' "$_ckey" | tr -d '\n') |
|||
|
|||
for SITE_ID in $Netlify_SITE_ID; do |
|||
_request_body="{\"certificate\":\"$string_ccert\",\"key\":\"$string_key\",\"ca_certificates\":\"$string_cca\"}" |
|||
_debug _request_body "$_request_body" |
|||
_debug Netlify_ACCESS_TOKEN "$Netlify_ACCESS_TOKEN" |
|||
export _H1="Authorization: Bearer $Netlify_ACCESS_TOKEN" |
|||
_response=$(_post "$_request_body" "https://api.netlify.com/api/v1/sites/$SITE_ID/ssl" "" "POST" "application/json") |
|||
|
|||
if _contains "$_response" "\"error\""; then |
|||
_err "Error in deploying $_cdomain certificate to Netlify SITE_ID $SITE_ID." |
|||
_err "$_response" |
|||
return 1 |
|||
fi |
|||
_debug response "$_response" |
|||
_info "Domain $_cdomain certificate successfully deployed to Netlify SITE_ID $SITE_ID." |
|||
done |
|||
|
|||
return 0 |
|||
} |
|||
@ -0,0 +1,130 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
#Support OpsGenie API integration |
|||
|
|||
#OPSGENIE_API_KEY="" Required, opsgenie api key |
|||
#OPSGENIE_REGION="" Optional, opsgenie region, can be EU or US (default: US) |
|||
#OPSGENIE_PRIORITY_SUCCESS="" Optional, opsgenie priority for success (default: P5) |
|||
#OPSGENIE_PRIORITY_ERROR="" Optional, opsgenie priority for error (default: P2) |
|||
#OPSGENIE_PRIORITY_SKIP="" Optional, opsgenie priority for renew skipped (default: P5) |
|||
|
|||
_OPSGENIE_AVAIL_REGION="US,EU" |
|||
_OPSGENIE_AVAIL_PRIORITIES="P1,P2,P3,P4,P5" |
|||
|
|||
opsgenie_send() { |
|||
_subject="$1" |
|||
_content="$2" |
|||
_status_code="$3" #0: success, 1: error, 2($RENEW_SKIP): skipped |
|||
|
|||
OPSGENIE_API_KEY="${OPSGENIE_API_KEY:-$(_readaccountconf_mutable OPSGENIE_API_KEY)}" |
|||
if [ -z "$OPSGENIE_API_KEY" ]; then |
|||
OPSGENIE_API_KEY="" |
|||
_err "You didn't specify an OpsGenie API key OPSGENIE_API_KEY yet." |
|||
return 1 |
|||
fi |
|||
_saveaccountconf_mutable OPSGENIE_API_KEY "$OPSGENIE_API_KEY" |
|||
export _H1="Authorization: GenieKey $OPSGENIE_API_KEY" |
|||
|
|||
OPSGENIE_REGION="${OPSGENIE_REGION:-$(_readaccountconf_mutable OPSGENIE_REGION)}" |
|||
if [ -z "$OPSGENIE_REGION" ]; then |
|||
OPSGENIE_REGION="US" |
|||
_info "The OPSGENIE_REGION is not set, so use the default US as regeion." |
|||
elif ! _hasfield "$_OPSGENIE_AVAIL_REGION" "$OPSGENIE_REGION"; then |
|||
_err "The OPSGENIE_REGION \"$OPSGENIE_REGION\" is not available, should be one of $_OPSGENIE_AVAIL_REGION" |
|||
OPSGENIE_REGION="" |
|||
return 1 |
|||
else |
|||
_saveaccountconf_mutable OPSGENIE_REGION "$OPSGENIE_REGION" |
|||
fi |
|||
|
|||
OPSGENIE_PRIORITY_SUCCESS="${OPSGENIE_PRIORITY_SUCCESS:-$(_readaccountconf_mutable OPSGENIE_PRIORITY_SUCCESS)}" |
|||
if [ -z "$OPSGENIE_PRIORITY_SUCCESS" ]; then |
|||
OPSGENIE_PRIORITY_SUCCESS="P5" |
|||
_info "The OPSGENIE_PRIORITY_SUCCESS is not set, so use the default P5 as priority." |
|||
elif ! _hasfield "$_OPSGENIE_AVAIL_PRIORITIES" "$OPSGENIE_PRIORITY_SUCCESS"; then |
|||
_err "The OPSGENIE_PRIORITY_SUCCESS \"$OPSGENIE_PRIORITY_SUCCESS\" is not available, should be one of $_OPSGENIE_AVAIL_PRIORITIES" |
|||
OPSGENIE_PRIORITY_SUCCESS="" |
|||
return 1 |
|||
else |
|||
_saveaccountconf_mutable OPSGENIE_PRIORITY_SUCCESS "$OPSGENIE_PRIORITY_SUCCESS" |
|||
fi |
|||
|
|||
OPSGENIE_PRIORITY_ERROR="${OPSGENIE_PRIORITY_ERROR:-$(_readaccountconf_mutable OPSGENIE_PRIORITY_ERROR)}" |
|||
if [ -z "$OPSGENIE_PRIORITY_ERROR" ]; then |
|||
OPSGENIE_PRIORITY_ERROR="P2" |
|||
_info "The OPSGENIE_PRIORITY_ERROR is not set, so use the default P2 as priority." |
|||
elif ! _hasfield "$_OPSGENIE_AVAIL_PRIORITIES" "$OPSGENIE_PRIORITY_ERROR"; then |
|||
_err "The OPSGENIE_PRIORITY_ERROR \"$OPSGENIE_PRIORITY_ERROR\" is not available, should be one of $_OPSGENIE_AVAIL_PRIORITIES" |
|||
OPSGENIE_PRIORITY_ERROR="" |
|||
return 1 |
|||
else |
|||
_saveaccountconf_mutable OPSGENIE_PRIORITY_ERROR "$OPSGENIE_PRIORITY_ERROR" |
|||
fi |
|||
|
|||
OPSGENIE_PRIORITY_SKIP="${OPSGENIE_PRIORITY_SKIP:-$(_readaccountconf_mutable OPSGENIE_PRIORITY_SKIP)}" |
|||
if [ -z "$OPSGENIE_PRIORITY_SKIP" ]; then |
|||
OPSGENIE_PRIORITY_SKIP="P5" |
|||
_info "The OPSGENIE_PRIORITY_SKIP is not set, so use the default P5 as priority." |
|||
elif ! _hasfield "$_OPSGENIE_AVAIL_PRIORITIES" "$OPSGENIE_PRIORITY_SKIP"; then |
|||
_err "The OPSGENIE_PRIORITY_SKIP \"$OPSGENIE_PRIORITY_SKIP\" is not available, should be one of $_OPSGENIE_AVAIL_PRIORITIES" |
|||
OPSGENIE_PRIORITY_SKIP="" |
|||
return 1 |
|||
else |
|||
_saveaccountconf_mutable OPSGENIE_PRIORITY_SKIP "$OPSGENIE_PRIORITY_SKIP" |
|||
fi |
|||
|
|||
case "$OPSGENIE_REGION" in |
|||
"US") |
|||
_opsgenie_url="https://api.opsgenie.com/v2/alerts" |
|||
;; |
|||
"EU") |
|||
_opsgenie_url="https://api.eu.opsgenie.com/v2/alerts" |
|||
;; |
|||
*) |
|||
_err "opsgenie region error." |
|||
return 1 |
|||
;; |
|||
esac |
|||
|
|||
case $_status_code in |
|||
0) |
|||
_priority=$OPSGENIE_PRIORITY_SUCCESS |
|||
;; |
|||
1) |
|||
_priority=$OPSGENIE_PRIORITY_ERROR |
|||
;; |
|||
2) |
|||
_priority=$OPSGENIE_PRIORITY_SKIP |
|||
;; |
|||
*) |
|||
_priority=$OPSGENIE_PRIORITY_ERROR |
|||
;; |
|||
esac |
|||
|
|||
_subject_json=$(echo "$_subject" | _json_encode) |
|||
_content_json=$(echo "$_content" | _json_encode) |
|||
_subject_underscore=$(echo "$_subject" | sed 's/ /_/g') |
|||
_alias_json=$(echo "acme.sh-$(hostname)-$_subject_underscore-$(date +%Y%m%d)" | base64 --wrap=0 | _json_encode) |
|||
|
|||
_data="{ |
|||
\"message\": \"$_subject_json\", |
|||
\"alias\": \"$_alias_json\", |
|||
\"description\": \"$_content_json\", |
|||
\"tags\": [ |
|||
\"acme.sh\", |
|||
\"host:$(hostname)\" |
|||
], |
|||
\"entity\": \"$(hostname -f)\", |
|||
\"priority\": \"$_priority\" |
|||
}" |
|||
|
|||
if response=$(_post "$_data" "$_opsgenie_url" "" "" "application/json"); then |
|||
if ! _contains "$response" error; then |
|||
_info "opsgenie send success." |
|||
return 0 |
|||
fi |
|||
fi |
|||
_err "opsgenie send error." |
|||
_err "$response" |
|||
return 1 |
|||
} |
|||
Write
Preview
Loading…
Cancel
Save
Reference in new issue