diff --git a/le-mailserver-restart.path b/le-mailserver-restart.path index 7dd8689..bfdae32 100644 --- a/le-mailserver-restart.path +++ b/le-mailserver-restart.path @@ -1,9 +1,9 @@ [Unit] -Description="Monitor the mailserver certificate files to trigger a e-mail services restart after the certificates has been renewed" +Description="Monitor the server certificate files to trigger a services restart after the certificates has been renewed" [Path] -PathModified=/root/.acme.sh/mail.example.com/ -Unit=le-mailserver-restart.service +PathModified=/root/.acme.sh/server.example.com/ +Unit=le-services-restart.service [Install] WantedBy=multi-user.target diff --git a/le-mailserver-restart.service b/le-mailserver-restart.service index b6f9e53..0f2d4aa 100644 --- a/le-mailserver-restart.service +++ b/le-mailserver-restart.service @@ -1,5 +1,5 @@ [Unit] -Description="Run script to restart Postfix and Dovecot after the certificate has been renewed" +Description="Run script to restart Services after the certificate has been renewed" [Service] -ExecStart=/usr/local/bin/le_mailserver_restart.sh +ExecStart=/usr/local/bin/le_services_restart.sh diff --git a/le_mailserver_restart.sh b/le_mailserver_restart.sh index c72bc50..0e5f047 100644 --- a/le_mailserver_restart.sh +++ b/le_mailserver_restart.sh @@ -1,15 +1,30 @@ #!/bin/sh ### BEGIN INIT INFO -# Provides: LE MAILSERVER CERT AUTO UPDATER +# Provides: LE SERVICES CERT AUTO UPDATER # Required-Start: $local_fs $network # Required-Stop: $local_fs # Default-Start: 2 3 4 5 # Default-Stop: 0 1 6 -# Short-Description: LE MAILSERVER CERT AUTO UPDATER -# Description: Restart mail server automatically when a new Let's Encrypt certificate is issued. +# Short-Description: LE SERVICES CERT AUTO UPDATER +# Description: Restart services automatically when a new Let's Encrypt certificate is issued. ### END INIT INFO systemctl restart postfix systemctl restart dovecot -cat /root/.acme.sh/mail.example.com/fullchain.pem > /etc/ssl/private/pure-ftpd.pem -cat /root/.acme.sh/mail.example.com/mail.example.com.key >> /etc/ssl/private/pure-ftpd.pem + +# pro-tftp +cat /root/.acme.sh/server.example.com/fullchain.pem > /etc/ssl/private/pure-ftpd.pem +cat /root/.acme.sh/server.example.com/server.example.com.key >> /etc/ssl/private/pure-ftpd.pem systemctl restart pure-ftpd-mysql.service + +# influxdb +FILE=/etc/influxdb/influxdb.pem +if [ -f "$FILE" ]; then + cat /root/.acme.sh/server.example.com/fullchain.pem > /etc/influxdb/influxdb.pem && systemctl restart influxd + cat /etc/letsencrypt/live/server.example.com/server.example.com.key > /etc/influxdb/influxdb.key && systemctl restart influxd +fi + + + + + + diff --git a/restart_services_on_cert_update.md b/restart_services_on_cert_update.md index 44b1195..9ec7b02 100644 --- a/restart_services_on_cert_update.md +++ b/restart_services_on_cert_update.md @@ -4,18 +4,18 @@ from: https://www.howtoforge.com/securing-your-ispconfig-3-managed-mailserver-wi ``` sh -nano /usr/local/bin/le_mailserver_restart.sh +nano /usr/local/bin/le_services_restart.sh ``` ``` sh -chmod +x /usr/local/bin/le_mailserver_restart.sh +chmod +x /usr/local/bin/le_services_restart.sh ``` ``` sh -nano /etc/systemd/system/le-mailserver-restart.service +nano /etc/systemd/system/le-services-restart.service ``` ```sh -nano /etc/systemd/system/le-mailserver-restart.path +nano /etc/systemd/system/le-services-restart.path ```