ansible-config/roles/certsync/templates/certsync.j2
Alexander Dietrich d24285cfc3 certsync changes
- run weekly
- preserve modification times
- reload nginx conditionally
2017-06-30 22:24:56 +02:00

23 lines
505 B
Django/Jinja
Executable file

#!/bin/bash
PATH="/bin:/usr/bin:/sbin:/usr/sbin"
CERT_DIR="{{ certsync_dir }}"
if [ ! -d $CERT_DIR ]; then
mkdir -p $CERT_DIR
chown root.root $CERT_DIR
chmod 750 $CERT_DIR
fi
sftp -p -q -i {{ certsync_key }} certsync@{{ certsync_host }}:* "$CERT_DIR/" > /dev/null 2>&1
if [ $? -ne 0 ]; then
echo "Error getting certificates"
exit 1
fi
chown root.root $CERT_DIR/*
chmod 440 $CERT_DIR/*
COUNT=$(find $CERT_DIR -mtime -7 | wc -l)
if [ $COUNT -gt 0 ]; then
service nginx reload > /dev/null
fi