Unverified Commit d75f80e0 authored by Dmitriy Safronov's avatar Dmitriy Safronov Committed by GitHub
Browse files

pr instead of push (#3) 



Signed-off-by: default avatarDmitriy Safronov <zimniy@cyberbrain.pw>
parent 017ba86a

.github/workflows/update.yaml

+15 −1
Original line number Diff line number Diff line
@@ -21,7 +21,7 @@ jobs: 
        uses: actions/checkout@v4

        with:

          fetch-depth: 0

          token: ${{ secrets.PAT }}

          # token: ${{ secrets.PAT }}



      - name: Install jq

        uses: dcarbone/install-jq-action@v2.1.0
@@ -43,3 +43,17 @@ jobs: 
        with:

          commit_message: "Automated Update. Git: ${{ steps.git-version.outputs.tag }}"

          file_pattern: 'files/ssl-refresher'



      - uses: peter-evans/create-pull-request@v3

        with:

          token: ${{ secrets.GITHUB_TOKEN }}

          branch: "upgrade/ssl-refresher/${{ steps.git-version.outputs.tag }}"

          delete-branch: true

          title: "chore(deps): upgrade ssl-refresher to ${{ steps.git-version.outputs.tag }}"

          signoff: true

          committer: "fluxcdbot <fluxcdbot@users.noreply.github.com>"

          author: "fluxcdbot <fluxcdbot@users.noreply.github.com>"

          commit-message: "chore(deps): upgrade ssl-refresher to ${{ steps.git-version.outputs.tag }}"

          body: |

            Release notes: https://github.com/dmitriysafronov/ssl-refresher/releases/tag/${{ steps.git-version.outputs.tag }}

          draft: false

files/ssl-refresher

deleted100644 → 0
+0 −90
Original line number Diff line number Diff line 
#!/usr/bin/env bash



LOGGER="logger -t ssl-refresher -s"

CONF_DIR="/etc/opt/ssl-refresher"



########################



die() {

  ${LOGGER} "$@"

  exit 1

}



check_replace_certs() {

  local CERT_NEW="$1"

  local CERT_OLD="$2"

  if [[ ! -f ${CERT_OLD} || -n "$(diff -q ${CERT_OLD} ${CERT_NEW})" ]]; then

      cp -f "${CERT_NEW}" "${CERT_OLD}"

      RESTART_SERVICES=1

  fi

}



########################



if [ "$(id -u)" -ne 0 ]; then

  die "Please run as root"

fi



########################



RESTART_SERVICES=0

DIE=0



########################



if [[ ! -f "${CONF_DIR}/secret" ]]; then

  echo "No secret file [${CONF_DIR}/secret] found!"

  DIE=1

fi



if [[ ! -f "${CONF_DIR}/config" ]]; then

  ${LOGGER} "No config file [${CONF_DIR}/config] found!"

  DIE=1

fi



source "${CONF_DIR}/config"



########################



if [[ -z "${REMOTE_SERVER}" ]]; then

  ${LOGGER} "REMOTE_SERVER is not specified in config file!"

  DIE=1

fi



if [[ -z "${REMOTE_USER}" ]]; then

  ${LOGGER} "REMOTE_USER is not specified in config file!"

  DIE=1

fi



if [[ -z "${REMOTE_DIR}" ]]; then

  ${LOGGER} "REMOTE_DIR is not specified in config file!"

  DIE=1

fi



########################



if [[ "${DIE}" == 1 ]]; then

  die "Errors were found! Exiting... Refer to [${CONF_DIR}] for additional configuration."

fi



########################



WORK_DIR="$(mktemp -d)"

mkdir -p "/opt/ssl/"



"${RSYNC_COMMAND:-rsync}" -aL --password-file="${CONF_DIR}/secret" rsync://"${REMOTE_USER}"@"${REMOTE_SERVER}"/"${REMOTE_DIR}/" "${WORK_DIR}/" || die "Could not rsync"



check_replace_certs "${WORK_DIR}/chain.pem" "/opt/ssl/chain.pem"

check_replace_certs "${WORK_DIR}/fullchain.pem" "/opt/ssl/fullchain.pem"

check_replace_certs "${WORK_DIR}/cert.pem" "/opt/ssl/cert.pem"

check_replace_certs "${WORK_DIR}/privkey.pem" "/opt/ssl/privkey.pem"



chmod -R a+rX "/opt/ssl/"

rm -rf "${WORK_DIR}/"



########################



if [[ "$RESTART_SERVICES" == 1 ]]; then

    ${LOGGER} "SSL files were changed..."

    "${CONF_DIR}/success" &

fi