From: Giorgio Ravera Date: Sun, 8 Aug 2021 12:29:26 +0000 (+0200) Subject: Added PVE and dedicated functions X-Git-Url: http://git.giorgioravera.it/?a=commitdiff_plain;h=f1f7f2c2677ff5b54083fd8dcdc6ec0a5c768327;p=scripts.git Added PVE and dedicated functions --- diff --git a/update_certificate b/update_certificate index a05f571..5b339ef 100755 --- a/update_certificate +++ b/update_certificate @@ -52,76 +52,99 @@ function update_certificate () { fi } -## Download -#echo " ------------------------------- " -#echo "| Updating Download Certificate |" -#echo " ------------------------------- " -#host="download.giorgioravera.it" -#user="root" -#command="/etc/init.d/apache2 restart" -##command="systemctl restart apache2.service" -#copy_certificate -#echo "" +# Update Docker +function update_docker () { + echo " ------------------------------- " + echo "| Updating Docker Certificate |" + echo " ------------------------------- " + host="docker.giorgioravera.it" + user="root" + command="docker container restart traefik mosquitto zigbee2mqtt" + copy_certificate + echo "" +} + +# Update Asterisk +function update_asterisk () { + echo " ------------------------------- " + echo "| Updating Asterisk Certificate |" + echo " ------------------------------- " + host="asterisk.giorgioravera.it" + user="root" + command="cat $dst_tmp_cert > /etc/asterisk/keys/Asterisk.crt && + cat $dst_tmp_key > /etc/asterisk/keys/Asterisk.key && + cat $dst_tmp_cert > /etc/httpd/pki/webserver.crt && + cat $dst_tmp_key > /etc/httpd/pki/webserver.key && + fwconsole certificate --import && + fwconsole certificate --default=0 && + fwconsole reload && + systemctl reload httpd.service" + update_certificate + echo "" +} -# Docker -echo " ------------------------------- " -echo "| Updating Docker Certificate |" -echo " ------------------------------- " -host="docker.giorgioravera.it" -user="root" -command="docker container restart traefik mosquitto" -copy_certificate -echo "" +# Update NAS +function update_nas () { + echo " ------------------------------- " + echo "| Updating NAS Certificate |" + echo " ------------------------------- " + host="nas.giorgioravera.it" + user="admin" + command="cat $dst_tmp_server > /etc/stunnel/stunnel.pem && + openssl pkcs12 -export -in /etc/stunnel/stunnel.pem -out /etc/stunnel/stunnel.pk12 -name nas.giorgioravera.it -password pass: && + /etc/init.d/stunnel.sh restart" + # /etc/init.d/plex.sh restart" + update_certificate + echo "" +} -# Asterisk -echo " ------------------------------- " -echo "| Updating Asterisk Certificate |" -echo " ------------------------------- " -host="asterisk.giorgioravera.it" -user="root" -command="cat $dst_tmp_cert > /etc/asterisk/keys/Asterisk.crt && - cat $dst_tmp_key > /etc/asterisk/keys/Asterisk.key && - cat $dst_tmp_cert > /etc/httpd/pki/webserver.crt && - cat $dst_tmp_key > /etc/httpd/pki/webserver.key && - fwconsole certificate --import && - fwconsole certificate --default=0 && - fwconsole reload && - systemctl reload httpd.service" -update_certificate -echo "" +# Update Firewall +function update_firewall () { + echo " ------------------------------- " + echo "| Updating Firewall Certificate |" + echo " ------------------------------- " + host="firewall.giorgioravera.it" + user="admin" + ALIVE=$(ping -c 1 $host |grep ttl) + if [ ! -z "$ALIVE" ]; then + update_certificate_firewall + else + echo "Host $host not alive, skipped" + fi + echo "" +} -# NAS -echo " ------------------------------- " -echo "| Updating NAS Certificate |" -echo " ------------------------------- " -host="nas.giorgioravera.it" -user="admin" -command="cat $dst_tmp_server > /etc/stunnel/stunnel.pem && - /etc/init.d/stunnel.sh restart" -update_certificate -echo "" +# Update Xenserver +function update_xenserver () { + echo " ------------------------------- " + echo "| Updating Xenserver Certificate |" + echo " ------------------------------- " + host="xenserver.giorgioravera.it" + user="root" + command="cat $dst_tmp_server > /etc/xensource/xapi-ssl.pem && + systemctl restart xapi.service" + update_certificate + echo "" +} -# Firewall -echo " ------------------------------- " -echo "| Updating Firewall Certificate |" -echo " ------------------------------- " -host="firewall.giorgioravera.it" -user="admin" -ALIVE=$(ping -c 1 $host |grep ttl) -if [ ! -z "$ALIVE" ]; then - update_certificate_firewall -else - echo "Host $host not alive, skipped" -fi -echo "" +# Update PVE +function update_pve () { + echo " ------------------------------- " + echo "| Updating Proxmox Certificate |" + echo " ------------------------------- " + host="pve.giorgioravera.it" + user="root" + command="cat $dst_tmp_cert > /etc/pve/local/pve-ssl.pem && + cat $dst_tmp_key > /etc/pve/local/pve-ssl.key && + systemctl restart pveproxy.service && + systemctl restart nginx.service" + update_certificate + echo "" +} -# Xenserver -echo " ------------------------------- " -echo "| Updating Xenserver Certificate |" -echo " ------------------------------- " -host="xenserver.giorgioravera.it" -user="root" -command="cat $dst_tmp_server > /etc/xensource/xapi-ssl.pem && - systemctl restart xapi.service" -update_certificate -echo "" +update_docker +update_asterisk +update_nas +update_firewall +update_xenserver +#update_pve \ No newline at end of file