initial commit

etc/letsencrypt/renewal-hooks/deploy/ocsp

@@ -0,0 +1,19 @@
+#!/bin/sh
+set -ef
+
+: "${RENEWED_LINEAGE:?}"
+d="${RENEWED_LINEAGE}"
+
+[ -d "$d" ] || {
+	env printf '%s: not a directory: %q\n' "$0" "$d" >&2
+	exit 1
+}
+
+chain="$d/chain.pem"
+cert="$d/cert.pem"
+ocsp="$d/ocsp.der"
+
+[ -s "${cert}" ]  || exit 2
+[ -s "${chain}" ] || exit 3
+
+exec openssl-ocsp "${chain}" "${cert}" "${ocsp}"

etc/letsencrypt/renewal-hooks/post/angie

@@ -0,0 +1,2 @@
+#!/bin/sh
+exec systemctl --no-ask-password reload angie.service