You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Santeri ff3aea24aa Merge 0c7faa0612 into c73fdd4022 8 years ago
..
README.md Merge 0c7faa061264b64680577014850e61eea59d902c into c73fdd402243071d01a23eae7ae17088b5914d7d 8 years ago
apache.sh deploy apache script: fix comment (dovecot/apache) 9 years ago
cpanel_uapi.sh fix cpanel_uapi.sh 8 years ago
dovecot.sh fix format 9 years ago
exim4.sh spelling: oops 9 years ago
haproxy.sh fix format 9 years ago
keychain.sh deploy for OSX Keychain 9 years ago
kong.sh Update the notes 9 years ago
myapi.sh Add shfmt to format source code 9 years ago
mysqld.sh fix format 9 years ago
nginx.sh fix format 9 years ago
opensshd.sh fix format 9 years ago
pureftpd.sh fix format 9 years ago
unifi.sh Add deployment script for unifi controller 8 years ago
vsftpd.sh spelling: oops 9 years ago

README.md

Using deploy api

Before you can deploy your cert, you must issue the cert first.

Here are the scripts to deploy the certs/key to the server/services.

1. Deploy the certs to your cpanel host.

This hook is using UAPI and works in cPanel & WHM version 56 or newer.

export DEPLOY_CPANEL_USER=cpanel_username
acme.sh --deploy -d example.com --deploy-hook cpanel_uapi

DEPLOY_CPANEL_USER is required only if you run the script as root and it should contain cpanel username.

2. Deploy ssl cert on kong proxy engine based on api.

Before you can deploy your cert, you must issue the cert first. Currently supports Kong-v0.10.x.

acme.sh --deploy -d ftp.example.com --deploy-hook kong

3. Deploy the cert to remote server through SSH access.

(TODO)

4. Deploy the cert to local vsftpd server.

acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd

The default vsftpd conf file is /etc/vsftpd.conf, if your vsftpd conf is not in the default location, you can specify one:

export DEPLOY_VSFTPD_CONF="/etc/vsftpd.conf"

acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd

The default command to restart vsftpd server is service vsftpd restart, if it doesn't work, you can specify one:

export DEPLOY_VSFTPD_RELOAD="/etc/init.d/vsftpd restart"

acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd

5. Deploy the cert to local exim4 server.

acme.sh --deploy -d ftp.example.com --deploy-hook exim4

The default exim4 conf file is /etc/exim/exim.conf, if your exim4 conf is not in the default location, you can specify one:

export DEPLOY_EXIM4_CONF="/etc/exim4/exim4.conf.template"

acme.sh --deploy -d ftp.example.com --deploy-hook exim4

The default command to restart exim4 server is service exim4 restart, if it doesn't work, you can specify one:

export DEPLOY_EXIM4_RELOAD="/etc/init.d/exim4 restart"

acme.sh --deploy -d ftp.example.com --deploy-hook exim4

6. Deploy the cert to OSX Keychain

acme.sh --deploy -d ftp.example.com --deploy-hook keychain

7. Deploy to cpanel host.

acme.sh  --deploy  -d example.com  --deploy-hook cpanel_uapi

If you are login as root, please specify the username to deploy cert to:

export DEPLOY_CPANEL_USER=username
acme.sh  --deploy  -d example.com  --deploy-hook cpanel_uapi