summaryrefslogtreecommitdiff
path: root/proxy/renew-cert.sh
blob: 8924d9b8aa59395f3c8020f2679c967ac02f07de (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
#!/usr/bin/env bash
set -euo pipefail
cd "$(dirname "$0")"

DOMAIN="proxy.yyamashita.com"
CADDY_DIR="/app/infra/caddy"
CADDY_CERT_BASE="/data/caddy/certificates/acme-v02.api.letsencrypt.org-directory/${DOMAIN}/${DOMAIN}"

echo "証明書を更新中..."
mkdir -p certs

if ! docker compose -f "$CADDY_DIR/docker-compose.yml" exec -T caddy \
        cat "${CADDY_CERT_BASE}.crt" > certs/server.crt; then
    echo "Error: 証明書の取得に失敗しました。Caddyfile に ${DOMAIN} が設定されているか確認してください。"
    exit 1
fi
docker compose -f "$CADDY_DIR/docker-compose.yml" exec -T caddy \
    cat "${CADDY_CERT_BASE}.key" > certs/server.key
chmod 600 certs/server.key

echo "証明書を更新しました。"
bash "$(pwd)/deploy.sh"