summaryrefslogtreecommitdiff
path: root/vpn/renew-cert.sh
blob: 50f878461a3a9d27cabe940ae6da4674c51bf71d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
#!/usr/bin/env bash
set -euo pipefail
cd "$(dirname "$0")"

DOMAIN="vpn.yyamashita.com"
CADDY_DIR="/app/infra/caddy"
CADDY_CERT_BASE="/data/caddy/certificates/acme-v02.api.letsencrypt.org-directory/${DOMAIN}/${DOMAIN}"

echo "証明書を更新中..."

docker compose -f "$CADDY_DIR/docker-compose.yml" exec -T caddy \
    cat "${CADDY_CERT_BASE}.crt" > certs/server.crt
docker compose -f "$CADDY_DIR/docker-compose.yml" exec -T caddy \
    cat "${CADDY_CERT_BASE}.key" > certs/server.key
chmod 600 certs/server.key

docker compose exec vpn swanctl --load-creds --noprompt
echo "完了。証明書を更新してリロードしました。"