29 lines
1.1 KiB
Bash
Executable File
29 lines
1.1 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
# This is an example deploy renewal hook for certbot that copies newly updated
|
|
# certificates to the Mosquitto certificates directory and sets the ownership
|
|
# and permissions so only the mosquitto user can access them, then signals
|
|
# Mosquitto to reload certificates.
|
|
|
|
# RENEWED_DOMAINS will match the domains being renewed for that certificate, so
|
|
# may be just "example.com", or multiple domains "www.example.com example.com"
|
|
# depending on your certificate.
|
|
|
|
# Place this script in /etc/letsencrypt/renewal-hooks/deploy/ and make it
|
|
# executable after editing it to your needs.
|
|
|
|
if [ ${RENEWED_DOMAINS} == "my-mosquitto-domain" ]; then
|
|
# Copy new certificate to Mosquitto directory
|
|
cp ${RENEWED_LINEAGE}/fullchain.pem /etc/mosquitto/certs/server.pem
|
|
cp ${RENEWED_LINEAGE}/privkey.pem /etc/mosquitto/certs/server.key
|
|
|
|
# Set ownership to Mosquitto
|
|
chown mosquitto: /etc/mosquitto/certs/server.pem /etc/mosquitto/certs/server.key
|
|
|
|
# Ensure permissions are restrictive
|
|
chmod 0600 /etc/mosquitto/certs/server.pem /etc/mosquitto/certs/server.key
|
|
|
|
# Tell Mosquitto to reload certificates and configuration
|
|
pkill -HUP -x mosquitto
|
|
fi
|