coreos-home-server/service/letsencrypt/container/run-hook
Alex Palaistras f0fd067dca letsencrypt: Copy certs to host-specific directory
This should help make use of host-specific certificates easier, as
otherwise containers will have access to all certificates and private keys.
2024-01-03 19:57:23 +00:00

9 lines
467 B
Bash
Executable File

#!/bin/sh
set -eu
# Copy certificates to dedicated directory.
install --owner letsencrypt --group letsencrypt --mode 0755 -d "/var/lib/letsencrypt-certificates/$LEGO_CERT_DOMAIN"
install --owner letsencrypt --group letsencrypt --mode 0644 "$LEGO_CERT_PATH" "/var/lib/letsencrypt-certificates/$LEGO_CERT_DOMAIN/cert.pem"
install --owner letsencrypt --group letsencrypt --mode 0640 "$LEGO_CERT_KEY_PATH" "/var/lib/letsencrypt-certificates/$LEGO_CERT_DOMAIN/cert.key"