dehydrated/cron.weekly/local-dehydrated



#!/bin/sh
#
# Renew letsencrypt certificates

set -eu

REALM=$(cat /etc/local-ORG/realm) || true

# update non-EC mailhost cert if resolvable and not a certdomain
mailhost=$(cat "/etc/local-REDPILL/$REALM/mailhost") || true
mailname=$(cat /etc/mailname) || true

fqdn=$(hostname --fqdn)
if [ -n "$fqdn" ] && [ "$mailhost" != "$fqdn" ]; then
    extradomains=${extradomains:+$extradomains }$fqdn
fi

domain=$(hostname --domain)
if [ -n "$domain" ] && [ "$mailhost" != "$domain" ] && [ "$fqdn" != "$domain" ]; then
    extradomains=${extradomains:+$extradomains }$domain
fi

if [ -n "$mailhost" ] && [ "$mailhost" = "$mailname" ] && ! grep ^"$mailhost" /etc/dehydrated/domains.txt; then
    dehydrated --cron --domain "$mailhost $extradomains" --algo rsa
fi

# update certdomain certs
dehydrated --cron "$@"