acme scrip add

bin/acme.sh

@@ -1,97 +1,203 @@
 #!/usr/bin/env bash
 EMAIL=''
 NO_EMAIL=''
-INSTAL=''
 DOMAIN=''
+INSTALL=''
+UNINSTALL=''
+TYPE=0
+CONT_NAME='litespeed'
+ACME_SRC='https://raw.githubusercontent.com/Neilpang/acme.sh/master/acme.sh'
 
 help_message(){
-    echo 'Command [-domain XX]'
+    case ${1} in
-    echo 'Command --install [--email XX]'
+    "1")    
-    echo 'Command --install --no-email'
+        echo 'You will need to install acme script at the first time.'
-    echo 'Example: acme.sh -domain '
+        echo 'Please run acme.sh --install --email example@example.com'
-    echo 'Example: acme.sh --install --email example@example.com'
+        ;;
-    echo 'Example: acme.sh --install --no-email'
+    "2")    
+        echo 'Command [--install] [--email EMAIL_ADDR]'
+        echo 'Command [--install] [--no-email]'
+        echo 'Command [--domain DOMAIN_NAME]'    
+        echo 'Example: acme.sh --install --email example@example.com'
+        echo 'Example: acme.sh --install --no-email'
+        echo 'Example: acme.sh --domain example.com'
+        exit 0
+        ;;
+    "3")
+        echo 'Please run acme.sh -domain example.com to apply certificate'
+        exit 0
+        ;;
+    esac
 }
 
 check_input(){
     if [ -z "${1}" ]; then
-        help_message
+        help_message 2
-        exit 1
     fi
 }
 
-ck_acme(){
+domain_filter(){
-    if ! docker-compose exec litespeed su -c "test -f /root/.acme.sh/acme.sh"; then
+    if [ -z "${1}" ]; then
-        echo "It seems like you didn't install /root/.acme.sh/acme.sh, please run bin/acme.sh --install"
+        help_message 3
-        help_message
+    fi
+    DOMAIN="${1}"
+    DOMAIN="${DOMAIN#http://}"
+    DOMAIN="${DOMAIN#https://}"
+    DOMAIN="${DOMAIN#ftp://}"
+    DOMAIN="${DOMAIN#scp://}"
+    DOMAIN="${DOMAIN#scp://}"
+    DOMAIN="${DOMAIN#sftp://}"
+    DOMAIN=${DOMAIN%%/*}
+}
+
+email_filter(){
+    CKREG="^[a-z0-9!#\$%&'*+/=?^_\`{|}~-]+(\.[a-z0-9!#$%&'*+/=?^_\`{|}~-]+)*@([a-z0-9]([a-z0-9-]*[a-z0-9])?\.)+[a-z0-9]([a-z0-9-]*[a-z0-9])?\$"
+    if [[ "${1}" =~ ${CKREG} ]] ; then
+        echo -e "[O] The E-mail \033[32m${1}\033[0m is valid."
+    else
+        echo -e "[X] The E-mail \e[31m${1}\e[39m is invalid"
         exit 1
     fi
 }
 
-install_acme(){
+cert_hook(){
-        if [ ! -z ${NO_EMAIL} ]; then
+    echo '[Start] Adding ACME hook'
-            docker-compose exec litespeed su -c "cd;\
+    docker-compose exec ${CONT_NAME} su -s /bin/bash -c "certhookctl.sh"
-            wget https://raw.githubusercontent.com/Neilpang/acme.sh/master/acme.sh; chmod 755 acme.sh; \
+    echo '[End] Adding ACME hook'
-            ./acme.sh --install  \
+}
-            --cert-home  ~/.acme.sh/certs; \
+
-            rm ~/acme.sh"
+www_domain(){
+    CHECK_WWW=$(echo ${1} | cut -c1-4)
+    if [[ ${CHECK_WWW} == www. ]] ; then
+        DOMAIN=$(echo ${1} | cut -c 5-)
+    else
+        DOMAIN=${1}    
+    fi
+    WWW_DOMAIN="www.${DOMAIN}"
+}
+
+domain_verify(){
+    curl -Is http://${DOMAIN}/ | grep -i LiteSpeed > /dev/null 2>&1
+    if [ ${?} = 0 ]; then
+        echo -e "[O] The domain name \033[32m${DOMAIN}\033[0m is accessible."
+        TYPE=1
+        curl -Is http://${WWW_DOMAIN}/ | grep -i LiteSpeed > /dev/null 2>&1
+        if [ ${?} = 0 ]; then
+            echo -e "[O] The domain name \033[32m${WWW_DOMAIN}\033[0m is accessible."
+            TYPE=2
         else
-            if [ -z ${EMAIL} ]; then
+            echo -e "[!] The domain name ${WWW_DOMAIN} is inaccessible." 
-                echo "Error: You didn't specify the email you want to receive lets encrypt notifications on. Please add --email EMAIL"
-                exit
-                else
-                    docker-compose exec litespeed su -c "cd;\
-                    wget https://raw.githubusercontent.com/Neilpang/acme.sh/master/acme.sh; chmod 755 acme.sh; \
-                    ./acme.sh --install  \
-                    --cert-home  ~/.acme.sh/certs \
-                    --accountemail  ${EMAIL}; \
-                    rm ~/acme.sh"
-                fi
         fi
+    else
+        echo -e "[X] The domain name \e[31m${DOMAIN}\e[39m is inaccessible, please verify."
+        exit 1    
+    fi
+}
 
+install_acme(){
+    echo '[Start] Install ACME'
+    if [ "${1}" = 'true' ]; then
+        docker-compose exec litespeed su -c "cd; wget ${ACME_SRC}; chmod 755 acme.sh; \
+        ./acme.sh --install --cert-home  ~/.acme.sh/certs; \
+        rm ~/acme.sh"
+    elif [ "${2}" != '' ]; then
+        email_filter "${2}"
+        docker-compose exec litespeed su -c "cd; wget ${ACME_SRC}; chmod 755 acme.sh; \
+        ./acme.sh --install --cert-home  ~/.acme.sh/certs --accountemail  ${2}; \
+        rm ~/acme.sh"
+    else
+        help_message 1
+        exit 1
+    fi
+    echo '[End] Install ACME'
 }
 
-install_cert(){
+uninstall_acme(){
-    docker-compose exec litespeed su -c "/root/.acme.sh/acme.sh --issue -d ${DOMAIN} -w /var/www/vhosts/${DOMAIN}/html/"
+    echo '[Start] Uninstall ACME'
-    bin/webadmin.sh -r
+    docker-compose exec ${CONT_NAME} su -c "~/.acme.sh/acme.sh --uninstall"
+    echo '[End] Uninstall ACME'
+    exit 0
+}    
+
+check_acme(){
+    echo '[Start] Checking ACME'
+    docker-compose exec ${CONT_NAME} su -c "test -f /root/.acme.sh/acme.sh"
+    if [ ${?} != 0 ]; then
+        install_acme "${NO_EMAIL}" "${EMAIL}"
+        cert_hook
+        help_message 3
+    fi
+    echo '[End] Checking ACME'
+}
 
+lsws_restart(){
+    docker-compose exec ${CONT_NAME} su -c '/usr/local/lsws/bin/lswsctrl restart >/dev/null'
 }
 
-main(){
+doc_root_verify(){
-    if [ -z "${INSTALL}" ]; then
+    if [ "${DOC_ROOT}" = '' ]; then
-    ck_acme
+        DOC_PATH="/var/www/vhosts/${1}/html"
+    else
+        DOC_PATH="${DOC_ROOT}"    
+    fi
+    docker-compose exec ${CONT_NAME} su -c "[ -e ${DOC_PATH} ]"
+    if [ ${?} -eq 0 ]; then
+        echo -e "[O] The document root folder \033[32m${DOC_PATH}\033[0m does exist."
     else
-    install_acme ${EMAIL} ${NO_EMAIL}
+        echo -e "[X] The document root folder \e[31m${DOC_PATH}\e[39m does not exist!"
-    echo 'Acme installed, you can now issue your cert with bin/acme.sh -domain '
+        exit 1
-    exit 1
+    fi
+}
+
+install_cert(){
+    echo '[Start] Apply Lets Encrypt Certificate'
+    if [ ${TYPE} = 1 ]; then
+        docker-compose exec ${CONT_NAME} su -c "/root/.acme.sh/acme.sh --issue -d ${1} -w ${DOC_PATH}"
+    elif [ ${TYPE} = 2 ]; then
+        docker-compose exec ${CONT_NAME} su -c "/root/.acme.sh/acme.sh --issue -d ${1} -d www.${1} -w ${DOC_PATH}"
+    else
+        echo 'unknown Type!'
+        exit 2
     fi
+    echo '[End] Apply Lets Encrypt Certificate'
+}
+
+main(){
+    check_acme
+    domain_filter ${DOMAIN}
+    www_domain ${DOMAIN}
+    domain_verify
+    doc_root_verify ${DOMAIN}
     install_cert ${DOMAIN}
+    lsws_restart
 }
 
 check_input ${1}
 while [ ! -z "${1}" ]; do
     case ${1} in
         -[hH] | -help | --help)
-            help_message
+            help_message 2
-            exit 1
             ;;
-        -domain | -d ) shift
+        -d | -domain | --domain) shift
             check_input "${1}"
             DOMAIN="${1}"
             ;;
-        --install ) 
+        -i | --install ) 
             INSTALL=true
             ;;
-        --email ) shift
+        -u | --uninstall )
+            UNINSTALL=true
+            uninstall_acme
+            ;;            
+        -e | --email ) shift
             check_input "${1}"
             EMAIL="${1}"
             ;;
-        --no-email ) shift
+        -ne | --no-email ) shift
             NO_EMAIL=true
             ;;            
         *) 
-            help_message
+            help_message 2
-            exit 1
             ;;              
     esac
     shift

bin/container/certhookctl.sh

@@ -1,12 +1,18 @@
 #!/bin/bash
-BOTCRON='/etc/cron.d/certbot'
+BOTCRON='/var/spool/cron/crontabs/root'
 
-certbothook(){
+cert_hook(){
-    grep 'lswsctrl restart' ${BOTCRON} >/dev/null
+    grep 'acme' ${BOTCRON} >/dev/null
-    if [ ${?} = 1 ]; then
+    if [ ${?} = 0 ]; then
-        echo 'Add LSWS hook to certbot cronjob.'
+        grep 'lswsctrl' ${BOTCRON} >/dev/null
-        sed -i 's/0.*renew/&  --deploy-hook "\/usr\/local\/lsws\/bin\/lswsctrl restart"/g' ${BOTCRON}
+        if [ ${?} = 0 ]; then
+            echo 'Hook already exist, skip!'
+        else
+            sed -i 's/--cron/--cron --renew-hook "\/usr\/local\/lsws\/bin\/lswsctrl restart"/g' ${BOTCRON}
+        fi    
+    else
+        echo "[X] ${BOTCRON} does not exist, please check it later!"
     fi
 }
 
-certbothook
+cert_hook