update-smtp-certificates.sh
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

update-smtp-certificates.sh
View Options

	#!/bin/sh

	# -------------------------------------------------------------
	# Deploy mail certificate to SMTP server
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	# Project: Nasqueron
	# Created: 2016-11-03
	# License: Trivial work, not eligible to copyright
	# Source file: roles/mailserver/certificates/files/update-smtp-certificates.sh
	# -------------------------------------------------------------
	#
	# <auto-generated>
	# This file is managed by our rOPS SaltStack repository.
	#
	# Changes to this file may cause incorrect behavior
	# and will be lost if the state is redeployed.
	# </auto-generated>

	: ${CONTAINER_NAME='mailserver'}
	: ${CERT_DIR='/srv/data/letsencrypt/etc/live/mail.nasqueron.org-0001'}
	: ${CONTAINER_DIR="/var/lib/lxc/$CONTAINER_NAME/rootfs"}

	cp $CERT_DIR/fullchain.pem $CONTAINER_DIR/etc/ssl/certs/mailserver.crt
	cp $CERT_DIR/privkey.pem $CONTAINER_DIR/etc/ssl/private/mailserver.key

	# Mail servers can read the certificate as root before dropping privileges
	chown 0:0 $CONTAINER_DIR/etc/ssl/private/mailserver.key
	chmod 400 $CONTAINER_DIR/etc/ssl/private/mailserver.key

	lxc-attach -n $CONTAINER_NAME -- service postfix restart
	lxc-attach -n $CONTAINER_NAME -- service dovecot restart