summaryrefslogtreecommitdiff
path: root/proxy/renew-cert.sh
diff options
context:
space:
mode:
Diffstat (limited to 'proxy/renew-cert.sh')
-rw-r--r--proxy/renew-cert.sh22
1 files changed, 22 insertions, 0 deletions
diff --git a/proxy/renew-cert.sh b/proxy/renew-cert.sh
new file mode 100644
index 0000000..8924d9b
--- /dev/null
+++ b/proxy/renew-cert.sh
@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+set -euo pipefail
+cd "$(dirname "$0")"
+
+DOMAIN="proxy.yyamashita.com"
+CADDY_DIR="/app/infra/caddy"
+CADDY_CERT_BASE="/data/caddy/certificates/acme-v02.api.letsencrypt.org-directory/${DOMAIN}/${DOMAIN}"
+
+echo "証明書を更新中..."
+mkdir -p certs
+
+if ! docker compose -f "$CADDY_DIR/docker-compose.yml" exec -T caddy \
+ cat "${CADDY_CERT_BASE}.crt" > certs/server.crt; then
+ echo "Error: 証明書の取得に失敗しました。Caddyfile に ${DOMAIN} が設定されているか確認してください。"
+ exit 1
+fi
+docker compose -f "$CADDY_DIR/docker-compose.yml" exec -T caddy \
+ cat "${CADDY_CERT_BASE}.key" > certs/server.key
+chmod 600 certs/server.key
+
+echo "証明書を更新しました。"
+bash "$(pwd)/deploy.sh"