cert renew

assets/cert/renew.env

@@ -0,0 +1,5 @@
+HTTPREQ_ENDPOINT=<your httpreq endpoint>
+ACME_KID=<your acme kid>
+ACME_HMAC=<your acme hmac>
+ACME_DOMAINS=<your domain>
+ACME_EMAIL=<your email>

assets/cert/renew.service

@@ -0,0 +1,10 @@
+[Unit]
+Description=Renew certificate
+
+[Service]
+Type=simple
+EnvironmentFile=/etc/ring/renew.env
+ExecStart=/usr/local/bin/renew.sh
+
+[Install]
+WantedBy=multi-user.target

assets/cert/renew.sh

@@ -0,0 +1,13 @@
+#!/bin/sh
+
+set +x
+
+lego --path "/etc/ldap/cert" --email "${ACME_EMAIL}" --server "https://acme.zerossl.com/v2/DV90" --accept-tos --eab \
+--kid "${ACME_KID}" \
+--hmac "${ACME_HMAC}" \
+--key-type "rsa4096" \
+--dns "httpreq" \
+--domains "${ACME_DOMAINS}" \
+--pem \
+renew \
+--renew-hook="systemctl restart ring"

assets/cert/renew.timer

@@ -0,0 +1,10 @@
+[Unit]
+Description=Renew certificate
+
+[Timer]
+Persistent=true
+OnCalendar=*-*-* 3:35
+RandomizedDelaySec=1h
+
+[Install]
+WantedBy=timers.target