6132af8ecb
enable qiniu to deploy more than one domain
5 years ago
0453d656d6
fix(deploy/panos): data format improvements
...
It was discovered in testing that PAN-OS < 9.0 has slightly different
requirements for the multipart/form-data format and requires the `type`
parameter to be passed in the URL. These corrections should work for all
PAN-OS versions.
5 years ago
f38df4df11
Make remote backup directory path user configurable.
5 years ago
554e083f3d
For MULTI_CALL default to undefined, deleting entry in config file if set to "no"
5 years ago
fd64c20807
store device ID
5 years ago
80f1034dd6
add OTP support
5 years ago
8ba573d196
Change variable name to MULTI_CALL so default can be "no"
5 years ago
f73a494407
Remove spaces on blank line to fix travis error
5 years ago
46ee74ed16
Remove variable from info/error printout that could potentially expose login credentials.
5 years ago
806b746fc0
Fix bug where backup and batch_mode yes/no values could not be changed.
...
Once set to "no" then they could never be set back to "yes"
5 years ago
cc820e97c6
Add support for DEPLOY_SSH_BATCH_MODE with default of yes.
...
Before this update all remote commands were bunched together and
sent to the remote host in a single SSH command. This could result
in a very long sequence of commands that might be rejected by a
remote host (example is VMware ESXi that uses busybox sh).
With this update you can set DEPLOY_SSH_BATCH_MODE="no" and
each remote command is sent as a separate SSH call so now we
do not have big long sequence of commands. Defaults to same
behaviour as before this update.
5 years ago
283b04df73
Move cleanup of backup directory to first step in the function.
5 years ago
6420d1239f
Move call to remote system into separate function
5 years ago
3d9608faa0
Move -T parameter into default ssh command variable
5 years ago
e184a1b9e6
haproxy deploy script now compatible with OpenSSL v1.1+
...
haproxy deploy script now compatible with OpenSSL v1.1+
The OpenSSL OCSP request for haproxy deployment breaks from OpenSSL v1.1.0 on.
The format of the `-header` option has been changed and does now contain a `=` instead of a whitespace.
Other projects have hit the same issue:
https://github.com/nghttp2/nghttp2/issues/742
This commit determines the OpenSSL/LibreSSL version and then adjusts the request accordingly.
Also removed the duplicate command line and added some more debug output.
5 years ago
754f7a7891
Merge pull request #2614 from PaloAltoNetworks/deploy-panos
...
Adding abillity to deploy cert to Palo Alto Networks Firewall via API.
5 years ago
21450a08c2
Fixed 6 character requirement.
5 years ago
c355b25bb1
Fixed line formatting
5 years ago
1fe3d80838
Updated to use saveconf function and base64encode.
5 years ago
930e16b64a
fix gitdiff
5 years ago
2077a70d03
Fixing gitdiff
5 years ago
cbdb8bd9b9
Fixing gitdiff
5 years ago
5dcb417676
ShellCheck fixes
5 years ago
71bc993e3d
Fixed Shellchecks
5 years ago
c2812896f8
Update deployer
5 years ago
1b475cf9f3
Remove -q from greps
5 years ago
d07172a528
Replace disabled linter with variable substituion
5 years ago
79637097ba
Use _utc_date
5 years ago
1259341095
Use deployconf properly
5 years ago
5d3bc95ac5
Fix some debug output
5 years ago
de25232a73
Allow creating new certificates when certificate is not found
5 years ago
95769de464
Fix shfmt/shellcheck issues
5 years ago
52a168b961
Stop using jq/curl directly
...
This is a lot more fragile then the previous code due to treating JSON as just a string
5 years ago
b3b00b6700
Using domainconf instead of account
5 years ago
8e8cda132c
Remove boilerplate from what I used for template
5 years ago
6459ccb185
Cleanup shfmt warnings
5 years ago
548f83c3ad
Cleanup shellcheck errors
5 years ago
555e0de9e4
Initial support for Synology DSM
...
This allows you to update a key on a Synology DSM using the existing API.
Handles restarting the necessary services the certificate is attached to and all other internal stuff (copying the certificate around, etc.)
This is way less error prone than most articles I've found on how to update a Synology DSM certificate.
5 years ago
d9a9695fe0
Deploy certificates to Palo Alto Network Firewalls
5 years ago
d795fac37a
update repo name
5 years ago
84b0f29d87
Merge branch 'dev' into master
5 years ago
b23e05dbc5
Added trailing slash to end of each line of DEPLOY_SCRIPT_CMD
5 years ago
7ad3ddef2a
Merge pull request #2539 from temoffey/gcore_cdn
...
Gcore cdn
5 years ago
252a21e2ae
fixed json parse regex for support api gcore_cdn
5 years ago
ac9f6e3a41
Remove trailing spaces in text files
...
This issue in the shell scripts will also be detected in the stable
version of shfmt(we are currently using an ancient pre-release of shfmt)
5 years ago
ee38cccad8
sync ( #2436 )
...
* fix https://github.com/Neilpang/acme.sh/issues/2409 (#2430 )
* Add variable exports for Successful Post Hook and Renew Hook calls (#2431 )
* fixed json parse regex for support api gcore_cdn (#2381 )
5 years ago
f82ff90f06
fixed json parse regex for support api gcore_cdn ( #2381 )
5 years ago
55dea4ee9d
sync ( #2404 )
...
* support jdcloud.com
* fix format
* ttl 3000
* Escape slashes (#2375 )
* Change 1.1.1.1 to 1.0.0.1 to probe compatibility (#2330 )
As we can see, 1.1.1.1 is not routed or routed to an Intranet devices due to historical reason. Change 1.1.1.1 to 1.0.0.1 will have a better compatibility. I found this problem on my Tencent Cloud server.
* check empty id
* fix error
* Add dnsapi for Vultr (#2370 )
* Add Vultr dns api
* PushOver notifications (#2325 )
* PushOver notifications, using AppToken, UserKey, and optional sounds
* fix errors
* added dns api support for hexonet (#1776 )
* update
* minor
* support new Cloudflare Token format
fix https://github.com/Neilpang/acme.sh/issues/2398
* fix wildcard domain name
* add more info
* fix https://github.com/Neilpang/acme.sh/issues/2377
* fix format
* fix format
5 years ago
45e8bb03e4
add more info
5 years ago
54e189616c
fix wildcard domain name
5 years ago
06f860c8ea
Merge pull request #2292 from cngarrison/master
...
change to routeros native script rather than bash multiline commands
6 years ago
951bd3a517
minor, check for mkdir
6 years ago
2e3ddd3a61
trim quotation marks
6 years ago
c42dbbfec8
reformatted RouterOS script for shfmt checks
6 years ago
aec6636205
add _getdeployconf
6 years ago
a18c3ff07d
use `sh -c`
6 years ago
64928b28bc
trim quotation marks
6 years ago
0bbaa51945
fix format
6 years ago
561803c0a7
add deploy hook to docker containers
6 years ago
03a407d4df
Added additional `shellcheck` ignores for client-side evaluation warning
...
Should pass CI tests now
6 years ago
0cddc8a154
change to routeros native script rather than bash multiline commands
6 years ago
1a126b700f
fix https://github.com/Neilpang/acme.sh/issues/2252
6 years ago
b28835a604
Update haproxy deploy hook ( #1591 )
...
* implement basic haproxy deploy
HAProxy requires the certificate chain and key to be concatenated and placed somewhere (can be anywhere). This script expects a single environment variable with the path where the concatenated PEM file should be written
* add docs for HAProxy deployment
* Add conditional check to ensure path is provided
* remove whitespace
* remove more whitespace (trying to get TravisCI working)
* add reload
* update for POSIX compliance
* add documentation for reload command
* Update haproxy deploy hook
Add functionality to add OCSP stapling info (.ocsp file), issuer (.issuer file) and multi-cert bundles (suffix on pem file based on key type).
This also corrects the order of key, certificate and intermediate in the PEM file, which although HAProxy does not seem to care, was incorrect in the prior version.
* Document updated haproxy deploy hook
* Fix variable name
* whitespace fixes
* Support HAPROXY_DEPLOY_PEM_PATH
Adds compatibility to original haproxy deploy hook while still allowing custom PEM file name (via HAPROXY_DEPLOY_PEM_NAME)
* update for new haproxy deploy vars
* Fix return from reload
* Fix Le_Keylength case
* Update cert suffix for bundles .ocsp generation
* Whitepspace
* Change default for reload
* Readme update
* Actually set reload default
* Fix README.md confict
6 years ago
6340704173
fixed line breaks for support api gcore_cdn ( #2237 )
6 years ago
37ef0a0cb6
Fix README.md confict
6 years ago
d1f39e6217
Merge pull request #706 from palhaland/dev
...
Shell script for deploying changes to a routeros server.
6 years ago
297859c5bc
Merge pull request #2191 from temoffey/gcore_cdn_deploy
...
fix gcore_cdn_deploy
6 years ago
bea52aa743
remove use grep -E
6 years ago
a4cc9ef2cc
Merge pull request #2178 from temoffey/gcore_cdn_deploy
...
Gcore cdn deploy
6 years ago
df9174577a
remove check jq
6 years ago
bd1bb7a71b
fix syntax
6 years ago
4b6e7e6c37
remove use while, [[ ]], array
6 years ago
8896642e25
fix syntax
6 years ago
0ecb5a3fec
fix syntax
6 years ago
d289b0b450
fix syntax
6 years ago
b8489464b3
remove use awk, jq, curl
6 years ago
ebaa3f39e4
Merge remote-tracking branch 'origin/dev' into dev
6 years ago
e19753dcde
Moved documentation from deploy/README.md to deploy/routeros.sh
6 years ago
16b0704acc
remove readme
6 years ago
61bcd67a5d
move to wiki
6 years ago
89989adcad
fix syntax
6 years ago
95cdb4b2bc
fix syntax
6 years ago
228c835466
gcore_cdn_deploy
6 years ago
d604166194
Fix formatting
6 years ago
d643a2ff13
Check if mailcow path is set and fix directory check
6 years ago
b581a171f0
Add documentation for mailcow deploy hook
6 years ago
307336cfc4
Add deploy hook for mailcow
...
This hook will copy the key and certificate chain to the specified
mailcow installation (as described in
https://mailcow.github.io/mailcow-dockerized-docs/firststeps-ssl/#use-own-certificates )
and restarts the containers, that are using the certificates.
The hook has 2 parameters:
* `DEPLOY_MAILCOW_PATH`: The path to the mailcow installation (required)
* `DEPLOY_MAILCOW_RELOAD`: The reload command, defaults to `docker-compose restart postfix-mailcow dovecot-mailcow nginx-mailcow`
6 years ago
86fbb5952e
Use env sh
6 years ago
2a52603b7e
Merge pull request #2128 from the729/fix-qiniu-base64
...
fix deploy/qiniu.sh base64
6 years ago
22e7b4c911
fix doc of qiniu deploy script
...
A leading dot should be included when updating wildcard domains.
6 years ago
af5f7a7779
fix deploy/qiniu.sh base64
...
According to the doc (https://developer.qiniu.com/kodo/manual/1231/appendix#1 ), we should use URL-safe base64 instead of plain base64 for token calculation.
6 years ago
1dab2ac7d3
Updated with latest changes from Neilpang/dev
6 years ago
16a0f40ac2
Support for MyDevil.net ( #2076 )
...
support mydevil
6 years ago
a4a53e1355
Move docs into README.md from README_zh.md
6 years ago
c445e70cff
fix indent
6 years ago
e8eec2cb41
add chinese readme
6 years ago
dd6fa4af00
Save `QINIU_CDN_DOMAIN` only when defined
6 years ago
afdb9a63ff
chore: replece `Le_Deploy_Qiniu_*` with `QINIU_*`
6 years ago
4c1fa9c242
save CDN Domain with `_savedomainconf`
6 years ago
3c6b707353
add `QINIU_CDN_DOMAIN` for wildcard certificate
6 years ago
96efc8c7f0
lint codes
6 years ago
0cd6afde6f
Add guidance to deploying cert to qiniu.com
6 years ago
82b11da4ca
replace `awk` with `sed` and `tr`
6 years ago
4ec39ab707
replace with functions defined in acme.sh
6 years ago
d2a60f3ca4
lint code
6 years ago
3bc6628227
Update Qiniu's domain settings after uploading certificate
6 years ago
e19809d5b5
Add deployment for qiniu cdn
...
Upload certificate and privkey to Qiniu's CDN service with https://developer.qiniu.com/fusion/api/4248/certificate
6 years ago
9f067d7f56
Deploy to Hashicorp Vault docs
6 years ago
c84466b131
Write certs in Vault for Fabio load balancer
6 years ago
454c90820d
Actually set reload default
6 years ago
0a4e61c1dd
Readme update
6 years ago
31d9ba7e02
Change default for reload
6 years ago
80b40c02b4
use perl instead of iconv, if iconv is not available
6 years ago
8d6443b25d
Fix Syntax
6 years ago
e3c7fc8077
Fix Syntax
6 years ago
bbf2a15f27
Fix Syntax
6 years ago
5a326b82bd
Fix Syntax
6 years ago
f1b0dd7836
Fix Syntax
6 years ago
c205777542
Better integration with acme.sh utils
6 years ago
b401dbbf65
Fix Syntax
6 years ago
75dd0a770f
Fix Syntax
6 years ago
6d8292cdd8
Syntax fix
6 years ago
0575eb671a
Fix double quote around URL
6 years ago
d06eea53ef
Add deploy plugin for Gitlab pages
6 years ago
9e96a93172
Updated README with Gitlab help
6 years ago
63134fafec
Fix key leakage in SSH deploy log
6 years ago
f60dde4138
Merge pull request #1698 from Neilpang/dev
...
Dev
7 years ago
9c545059ae
fix warning
7 years ago
05dea7b22a
fix warning
7 years ago
d987d61ea9
Issue #1328 bug fix v3
...
Eliminated php dependency with a private function for urlencode using sed. Php had failed on godaddy due to multiple php instances and naturally cron using the one without the necessary -r option. Compared to previous PR the sed code is now POSIX and should work on all environments.
7 years ago
8d348954a7
Whitepspace
7 years ago
7d19d784df
Update cert suffix for bundles .ocsp generation
7 years ago
733b4e0a34
Fix Le_Keylength case
7 years ago
08d29a8342
Fix return from reload
7 years ago
675e2d25d6
update for new haproxy deploy vars
7 years ago
ba20af48d3
Support HAPROXY_DEPLOY_PEM_PATH
...
Adds compatibility to original haproxy deploy hook while still allowing custom PEM file name (via HAPROXY_DEPLOY_PEM_NAME)
7 years ago
707e053949
whitespace fixes
7 years ago
c47e67e52c
Fix variable name
7 years ago
3a95bfb699
Document updated haproxy deploy hook
7 years ago
6567bb4c12
Update haproxy deploy hook
...
Add functionality to add OCSP stapling info (.ocsp file), issuer (.issuer file) and multi-cert bundles (suffix on pem file based on key type).
This also corrects the order of key, certificate and intermediate in the PEM file, which although HAProxy does not seem to care, was incorrect in the prior version.
7 years ago
c9818ea2c4
add documentation for reload command
7 years ago
afe5cb588d
update for POSIX compliance
7 years ago
e9e999542d
add reload
7 years ago
5f593994c7
remove more whitespace (trying to get TravisCI working)
7 years ago
ec73aeba16
remove whitespace
7 years ago
7573e560b6
Add conditional check to ensure path is provided
7 years ago
c8bc155cfe
Merge pull request #1 from dwatrous/patch-2
...
add docs for HAProxy deployment
7 years ago
1eae73105a
add docs for HAProxy deployment
7 years ago
360dc140ea
implement basic haproxy deploy
...
HAProxy requires the certificate chain and key to be concatenated and placed somewhere (can be anywhere). This script expects a single environment variable with the path where the concatenated PEM file should be written
7 years ago
87a8dda955
add chain cert
7 years ago
8d38cf4d1f
Use allchain instead of ca an cert, add documentation after review
7 years ago
d698c1093a
remove spaces around assignment
7 years ago
7b327d47c0
Fix documentation
7 years ago
e629985cf4
Use _cdomain if ROUTER_OS_HOST is missing
7 years ago
aa875f1147
Merge branch 'master' into dev
7 years ago
6b15cf3f72
Remove template text
7 years ago
2d7b9817cb
Fix typos
7 years ago
98b8bfb3fa
Merge branch 'dev' of https://github.com/Neilpang/acme.sh into ssh-deploy
7 years ago
d3de50e0f9
Merge pull request #1270 from rbelnap/vault-deploy
...
Vault deploy
7 years ago
2c45f27356
rename deploy hook vault to vault_cli
7 years ago
c86755f1ab
format fix
7 years ago
b8418ced44
syntax fixes
7 years ago
fac0beaa0a
Add support for strongSwan deploys in FreeBSD
...
Related to 8ea800205c
7 years ago
90e587a974
add vault deploy hook script
7 years ago
8ea800205c
support both debian and redhat
7 years ago
c809b33161
Merge branch 'master' of https://github.com/Neilpang/acme.sh into ssh-deploy
7 years ago
4ef1159666
Merge pull request #1055 from hiskang/deploy/strongswan
...
Deploy/strongswan
7 years ago
c924e7c537
remove "return 0"
7 years ago
372f691fd6
unify headlines
...
unify headlines in deploy readme
7 years ago
5f05a452fc
Merge branch 'dev' into deploy/strongswan
7 years ago
afe3283c53
Update README.md
7 years ago
641a2895a6
Create strongswan.sh
7 years ago
0427e8bbb4
Merge pull request #993 from fritteli/deploy-fritzbox
...
Deploy fritzbox
7 years ago
acf117584b
#1042
...
Apparently UAPI does not return any error code, just JSON output that has a string "status: 0" whenever the command fails.
7 years ago
2fc0225bc9
Make command line example consistent with env variable example.
7 years ago
3536cd336d
Merge branch 'dev' into deploy-fritzbox
7 years ago
a9726fde19
1 cert per domain
...
for cpanel_uapi
7 years ago
f81d4033fa
One cert per domain
...
Deploy works only for the first domain
7 years ago
1e30718df6
Try and work around shellcheck error SC2039: In POSIX sh, printf -%s-- is undefined.
7 years ago
72e1eb88d9
Don't use individual redirects, but do it all in one block.
7 years ago
8ee5ede834
Fix more formatting errors
7 years ago
bd8b1a2501
Don't use wget directly, but instead use _get and _post.
7 years ago
a098167bdb
Fix more formatting errors
7 years ago
e52304edb4
cpanel_uapi
...
tried to make it a bit less confusing
7 years ago
6cb5377d73
Fix bugs and more/new formatting errors.
7 years ago
a3a92ff1df
Fix formatting errors.
7 years ago
103fa959cb
Typo
7 years ago
b6d48b7a14
Update README.md for the deploy hooks.
7 years ago
412e4e6cf9
Add acknowledgement note
7 years ago
e6f81173a3
Delete auto-backup file
7 years ago
d50281453d
Add --no-check-certificate option to wget, or else the initial deployment won't work because there isn't a valid certificate installed on the router yet.
7 years ago
4bb488258d
- Bugfixes
...
- Make sure the login actually worked
- Less output
7 years ago
f6da19ba83
add deploy script for the AVM FRITZ!Box
7 years ago
a2d6daaef4
fix cpanel_uapi.sh
7 years ago
48e9006cd1
fix cpanel uapi
7 years ago
d36440a06d
Merge pull request #940 from 2globalnomads/patch-1
...
cpanel_uapi.sh
7 years ago
94e9844179
Merge remote-tracking branch 'upstream/master' into ssh-deploy
7 years ago
8eab77f3c6
Add deployment script for unifi controller
7 years ago
4286b2917e
renamed function
7 years ago
d09b5cb80e
Rename cpanel_uapi.sh to cpanel_deploy.sh
7 years ago
ucando