31 lines
731 B
Bash
31 lines
731 B
Bash
|
#!/bin/sh
|
||
|
|
# SPDX-License-Identifier: Apache-2.0
|
||
|
|
# (c) 2024, Konstantin Demin
|
||
|
|
|
||
|
|
set -ef
|
||
|
|
|
||
|
|
reload_angie=
|
||
|
|
while read -r certdir ; do
|
||
|
|
[ -n "${certdir}" ] || continue
|
||
|
|
|
||
|
|
chain="${certdir}/chain.pem"
|
||
|
|
cert="${certdir}/cert.pem"
|
||
|
|
ocsp="${certdir}/ocsp.der"
|
||
|
|
|
||
|
|
[ -s "${cert}" ] || continue
|
||
|
|
[ -s "${chain}" ] || continue
|
||
|
|
|
||
|
|
if certbot-ocsp "${chain}" "${cert}" "${ocsp}" ; then
|
||
|
|
reload_angie=1
|
||
|
|
fi
|
||
|
|
done <<EOF
|
||
|
|
$(find /etc/letsencrypt/live/ -xdev -follow -type f -name cert.pem -printf '%p\0' | xargs -0r dirname | sort -uV)
|
||
|
|
EOF
|
||
|
|
|
||
|
|
[ -n "${reload_angie}" ] || exit 0
|
||
|
|
|
||
|
|
angie_state=$(systemctl show --property=SubState angie.service | cut -d= -f2-)
|
||
|
|
[ "${angie_state}" = 'running' ] || exit 0
|
||
|
|
|
||
|
|
exec systemctl --no-ask-password reload angie.service
|