#!/bin/bash
|
__dirname=$(cd $(dirname "$0"); pwd -P)
|
cd ${__dirname}
|
|
hash certbot 2>/dev/null || not_found=true
|
if [ $not_found ]; then
|
echo "Certbot not found. You need to install certbot to use this script."
|
exit 1
|
fi
|
|
if [ "$WO_SSL" = "NO" ] || [ ! -z "$WO_SSL_KEY" ]; then
|
echo "SSL not enabled, or manual SSL key specified, exiting."
|
exit 1
|
fi
|
|
DOMAIN="${WO_HOST:=$1}"
|
if [ -z $DOMAIN ]; then
|
echo "Usage: $0 <my.domain.com>"
|
exit 1
|
fi
|
|
# Stop nginx if needed (free the port used by the standalone server)
|
nginx_was_running="NO"
|
pgrep nginx > /dev/null
|
if [ $? -eq 0 ]; then
|
killall nginx
|
nginx_was_running="YES"
|
fi
|
|
# Generate/update certificate
|
certbot certonly --http-01-port 8080 --work-dir ./letsencrypt --config-dir ./letsencrypt --logs-dir ./letsencrypt --standalone -d $DOMAIN --register-unsafely-without-email --agree-tos --keep
|
|
# Create ssl dir if necessary
|
if [ ! -e ssl/ ]; then
|
mkdir ssl
|
fi
|
|
# Update symlinks
|
if [ -e ssl/key.pem ]; then
|
rm ssl/key.pem
|
fi
|
|
if [ -e ssl/cert.pem ]; then
|
rm ssl/cert.pem
|
fi
|
|
if [ -e "letsencrypt/live/$DOMAIN" ]; then
|
ln -vs "../letsencrypt/live/$DOMAIN/privkey.pem" ssl/key.pem
|
ln -vs "../letsencrypt/live/$DOMAIN/fullchain.pem" ssl/cert.pem
|
else
|
echo -e "\033[91mWARN: We couldn't automatically generate the SSL certificate. Review the console log. WebODM will likely be inaccessible.\033[39m"
|
fi
|
|
# Restart nginx if necessary
|
if [ "$nginx_was_running" = "YES" ]; then
|
echo "Restarting nginx..."
|
nginx -c $(pwd)/nginx-ssl.conf
|
fi
|
