Files
baremetal-basics/upcerts
2026-04-14 21:50:30 +00:00

47 lines
1.6 KiB
Bash

#!/bin/bash
echo "UPDATING CERTS..."
echo "CERT DOMAIN NAME:"
read d
# STOP SERVICES
sudo systemctl stop cockpit.socket
sudo systemctl stop mumble-server
sudo systemctl stop ejabberd
## COCKPIT
sudo mkdir -p /etc/cockpit/ws-certs.d/
sudo rm -rf /etc/cockpit/ws-certs.d/99-letsencrypt.cert
sudo rm -rf /etc/cockpit/ws-certs.d/99-letsencrypt.key
sudo cp /etc/letsencrypt/live/$d/fullchain.pem /etc/cockpit/ws-certs.d/99-letsencrypt.cert
sudo cp /etc/letsencrypt/live/$d/privkey.pem /etc/cockpit/ws-certs.d/99-letsencrypt.key
# MUMBLE-SERVER
sudo rm /opt/mumble-server/cert.pem
sudo rm /opt/mumble-server/privkey.pem
sudo rm /opt/mumble-server/chain.pem
sudo rm /opt/mumble-server/fullchain.pem
sudo cat /etc/letsencrypt/live/$d/cert.pem >> /opt/mumble-server/cert.pem
sudo cat /etc/letsencrypt/live/$d/privkey.pem >> /opt/mumble-server/privkey.pem
sudo cat /etc/letsencrypt/live/$d/chain.pem >> /opt/mumble-server/chain.pem
sudo cat /etc/letsencrypt/live/$d/fullchain.pem >> /opt/mumble-server/fullchain.pem
# EJABBERD
sudo rm /opt/ejabberd/conf/ejabberd.pem
sudo cat /etc/letsencrypt/live/$d/privkey.pem /etc/letsencrypt/live/$d/fullchain.pem >> /opt/ejabberd/conf/ejabberd.pem
# START SERVICES
sudo systemctl start cockpit.socket
sudo systemctl start mumble-server
sudo systemctl start ejabberd
# RESTART SERVICES AND SHOW STATUS
sudo systemctl restart cockpit.socket
sudo systemctl restart mumble-server
sudo systemctl restart ejabberd
sudo systemctl status cockpit.socket
sudo systemctl status mumble-server
sudo systemctl status ejabberd
#sudo /usr/lib/cockpit/cockpit-certificate-ensure --check