Files
han-app/codebase/backend/deployment/scripts/ssl-renew.sh
T

14 lines
462 B
Bash

#!/bin/sh
set -eu
cd "$(dirname "$0")/../.."
lock=/tmp/han-chat-cert-renew.lock
exec 9>"$lock"
flock -n 9 || { echo '{"event":"tls.renew.skipped","reason":"lock_busy"}'; exit 0; }
docker compose --profile certbot run --rm certbot renew \
--webroot -w /var/www/certbot --quiet
docker compose exec -T nginx nginx -t -c /tmp/nginx.conf
docker compose exec -T nginx nginx -s reload
echo "{\"event\":\"tls.renew.completed\",\"timestamp\":\"$(date -u +%FT%TZ)\"}"