Page MenuHomeDevCentral
Files F3587548

D3430.id8852.diff
No OneTemporary
Actions

D3430.id8852.diff
View Options

diff --git a/roles/core/certificates/files/delete-certbot-certificate.sh b/roles/core/certificates/files/delete-certbot-certificate.sh
new file mode 100755
--- /dev/null
+++ b/roles/core/certificates/files/delete-certbot-certificate.sh
@@ -0,0 +1,61 @@
+#!/bin/sh
+
+# -------------------------------------------------------------
+# Remove a Let's Encrypt
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# License: BSD-2-Clause
+# -------------------------------------------------------------
+
+set -e
+
+# -------------------------------------------------------------
+# Ensure user is root
+#
+# Note: POSIX shells don't always define $UID or $EUID.
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+if [ "${EUID:-$(id -u)}" -ne 0 ]; then
+ echo "This command must be run as root." >&2
+ exit 1
+fi
+
+# -------------------------------------------------------------
+# Parse arguments
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+if [ $# -eq 0 ]; then
+ echo "Usage: $(basename "$0") <certificate>" >&2
+ exit 1
+fi
+
+CERTIFICATE=$1
+
+# -------------------------------------------------------------
+# Determine etc directory path
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+. /etc/os-release
+
+if [ "$ID" = "freebsd" ]; then
+ ETC=/usr/local/etc
+else
+ ETC=/etc
+fi
+
+# -------------------------------------------------------------
+# Determine if the certificate exists
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+if [ ! -f "$ETC/letsencrypt/live/$CERTIFICATE/chain.pem" ]; then
+ echo "The certificate cannot be found." >&2
+ exit 2
+fi
+
+# -------------------------------------------------------------
+# Delete certificate and renewal information
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+rm -rf "$ETC/letsencrypt/live/$CERTIFICATE"
+rm -rf "$ETC/letsencrypt/archive/$CERTIFICATE"
+rm "$ETC/letsencrypt/renewal/$CERTIFICATE.conf"
diff --git a/roles/core/certificates/letsencrypt.sls b/roles/core/certificates/letsencrypt.sls
--- a/roles/core/certificates/letsencrypt.sls
+++ b/roles/core/certificates/letsencrypt.sls
@@ -51,6 +51,11 @@
- source: salt://roles/core/certificates/files/edit-acme-dns-accounts.py
- mode: 755
+{{ dirs.bin }}/delete-certbot-certificate:
+ file.managed:
+ - source: salt://roles/core/certificates/files/delete-certbot-certificate.sh
+ - mode: 755
+
# -------------------------------------------------------------
# Check and renew certificates daily
#

File Metadata

Mime Type
text/plain
Expires
Sat, Sep 21, 00:48 (17 h, 58 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
2155623
Default Alt Text
D3430.id8852.diff (2 KB)

Event Timeline

Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator