обновление сайта

2026-07-27 16:01:43 +04:00
parent df0b051ee6
commit 373649c3d2
8 changed files with 96 additions and 4 deletions
@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+
+set -Eeuo pipefail
+
+CERTIFICATE_LINEAGE="${RENEWED_LINEAGE:-/etc/letsencrypt/live/mail.moon-well.online}"
+TLS_DIR="${MAIL_TLS_DIR:-/etc/moonwell-mail/tls}"
+MAIL_CONTAINER="${MAIL_CONTAINER:-moonwell-web-stalwart-1}"
+
+[[ -s "${CERTIFICATE_LINEAGE}/fullchain.pem" ]] || {
+    printf '[mail:tls:error] Certificate chain is missing\n' >&2
+    exit 1
+}
+
+[[ -s "${CERTIFICATE_LINEAGE}/privkey.pem" ]] || {
+    printf '[mail:tls:error] Private key is missing\n' >&2
+    exit 1
+}
+
+install -d -o root -g 2000 -m 0750 "$TLS_DIR"
+install -o root -g 2000 -m 0640 \
+    "${CERTIFICATE_LINEAGE}/fullchain.pem" \
+    "${TLS_DIR}/fullchain.pem"
+install -o root -g 2000 -m 0640 \
+    "${CERTIFICATE_LINEAGE}/privkey.pem" \
+    "${TLS_DIR}/privkey.pem"
+
+if docker container inspect "$MAIL_CONTAINER" >/dev/null 2>&1; then
+    docker restart "$MAIL_CONTAINER" >/dev/null
+fi
+
+printf '[mail:tls] Certificate deployed from %s\n' "$CERTIFICATE_LINEAGE"