Working certs renewal

.gitignore

@@ -0,0 +1,3 @@
+*.secret
+data/
+logs/

domains/savaneprod.fr.domain

@@ -0,0 +1,2 @@
+DOMAIN='savaneprod.fr'
+SUBJECT_ALTERNATIVE_NAME='*.savaneprod.fr'

domains/unciel.eu.domain

@@ -0,0 +1,2 @@
+DOMAIN='unciel.eu'
+SUBJECT_ALTERNATIVE_NAME='*.unciel.eu'

issue-or-renew-certs-for-dsm.sh

@@ -0,0 +1,78 @@
+SCRIPT_PATH="$(dirname $(readlink -f $BASH_SOURCE))"
+DOMAIN_FILES_PATH="$SCRIPT_PATH/domains"
+ACMESH_CONTAINER_DATA_PATH="$SCRIPT_PATH/data"
+ACMESH_LOCAL_PATH="$SCRIPT_PATH/acme.sh"
+
+source $SCRIPT_PATH/INFOMANIAK_API_TOKEN.secret
+source $SCRIPT_PATH/ZEROSSL.secret
+
+JOUR="$(date +%Y-%m-%d_%H%M)"
+LOGFILENAME="logs/$JOUR.log"
+
+if [ "$1" = "--help" ]
+then 
+  docker run --rm -it neilpang/acme.sh --help
+  docker rmi -f neilpang/acme.sh
+  exit 0
+fi
+
+ls $DOMAIN_FILES_PATH/*.domain > /dev/null 2>&1
+if [ $? -eq 2 ]
+then
+  echo "No domain file exists.
+  At least one .domain file must exists at $DOMAIN_FILES_PATH.
+  The file defines variables \$DOMAIN and \$SUBJECT_ALTERNATIVE_NAME."
+  exit 2
+fi
+
+if [ ! -d $SCRIPT_PATH/logs ]
+then mkdir -p $SCRIPT_PATH/logs
+fi
+
+for d in $(ls $DOMAIN_FILES_PATH/*.domain)
+do
+  source $d
+  if [ -d $ACMESH_CONTAINER_DATA_PATH/$DOMAIN_ecc ]
+  then ISSUE_OR_RENEW="--renew"; ACTION="Renouvellement"
+  else
+    ISSUE_OR_RENEW="--issue"; ACTION="Création"
+	mkdir $ACMESH_CONTAINER_DATA_PATH
+  fi
+
+  echo "#######  $ACTION du certificat $DOMAIN  #######" | tee -a $SCRIPT_PATH/$LOGFILENAME
+
+  docker run --rm  -it  \
+    -v "$ACMESH_CONTAINER_DATA_PATH":/acme.sh \
+    -v "$SCRIPT_PATH/logs:/logs" \
+	-e $INFOMANIAK_API_TOKEN \
+    neilpang/acme.sh $ISSUE_OR_RENEW -d $DOMAIN -d $SUBJECT_ALTERNATIVE_NAME --server zerossl --eab-kid $EAB_KID --eab-hmac-key $EAB_HMAC_KEY --dns dns_infomaniak --log "/$LOGFILENAME"
+  
+  echo "#######  Déploiement du certificat $DOMAIN sur DSM  #######" | tee -a $SCRIPT_PATH/$LOGFILENAME
+
+  if [ ! -d $ACMESH_LOCAL_PATH ]
+  then git clone https://github.com/acmesh-official/acme.sh.git $ACMESH_LOCAL_PATH
+  fi
+
+  export SYNO_CERTIFICATE="$DOMAIN cert"
+  # Creates the cert in DSM if it does not exist in Security/Certificate management.
+  export SYNO_Create=1
+  # When run locally, use an automatically created temp admin. Deletes it after use.
+  # https://github.com/acmesh-official/acme.sh/wiki/deployhooks#20-deploy-the-certificate-to-synology-dsm
+  export SYNO_USE_TEMP_ADMIN=1
+  
+  bash $ACMESH_LOCAL_PATH/acme.sh --home $ACMESH_CONTAINER_DATA_PATH -d $DOMAIN -d $SUBJECT_ALTERNATIVE_NAME --deploy --deploy-hook synology_dsm --log $SCRIPT_PATH/$LOGFILENAME
+
+  unset DOMAIN SUBJECT_ALTERNATIVE_NAME
+
+done
+
+echo "
+####### Suppression de $ACMESH_LOCAL_PATH... ########
+"
+rm -rf $ACMESH_LOCAL_PATH
+echo "
+####### Suppresion de l'image docker... #######
+"
+docker rmi -f neilpang/acme.sh
+
+exit 0