Created
April 1, 2017 17:57
-
-
Save claudio4/08facce8547d5771b65c3d9829181f11 to your computer and use it in GitHub Desktop.
Lexicon hook based on example hook of Analogj 's lexicon repository
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env bash | |
# | |
# lexicon hook for dehydrated | |
set -e | |
set -u | |
set -o pipefail | |
export PROVIDER=${PROVIDER:-"cloudflare"} | |
function deploy_challenge { | |
local DOMAIN="${1}" TOKEN_FILENAME="${2}" TOKEN_VALUE="${3}" | |
echo "deploy_challenge called: ${DOMAIN}, ${TOKEN_FILENAME}, ${TOKEN_VALUE}" | |
lexicon $PROVIDER create ${DOMAIN} TXT --name="_acme-challenge.${DOMAIN}." --content="${TOKEN_VALUE}" | |
sleep 1 | |
# This hook is called once for every domain that needs to be | |
# validated, including any alternative names you may have listed. | |
# | |
# Parameters: | |
# - DOMAIN | |
# The domain name (CN or subject alternative name) being | |
# validated. | |
# - TOKEN_FILENAME | |
# The name of the file containing the token to be served for HTTP | |
# validation. Should be served by your web server as | |
# /.well-known/acme-challenge/${TOKEN_FILENAME}. | |
# - TOKEN_VALUE | |
# The token value that needs to be served for validation. For DNS | |
# validation, this is what you want to put in the _acme-challenge | |
# TXT record. For HTTP validation it is the value that is expected | |
# be found in the $TOKEN_FILENAME file. | |
} | |
function clean_challenge { | |
local DOMAIN="${1}" TOKEN_FILENAME="${2}" TOKEN_VALUE="${3}" | |
echo "clean_challenge called: ${DOMAIN}, ${TOKEN_FILENAME}, ${TOKEN_VALUE}" | |
lexicon $PROVIDER delete ${DOMAIN} TXT --name="_acme-challenge.${DOMAIN}." --content="${TOKEN_VALUE}" | |
# This hook is called after attempting to validate each domain, | |
# whether or not validation was successful. Here you can delete | |
# files or DNS records that are no longer needed. | |
# | |
# The parameters are the same as for deploy_challenge. | |
} | |
function deploy_cert { | |
local DOMAIN="${1}" KEYFILE="${2}" CERTFILE="${3}" FULLCHAINFILE="${4}" CHAINFILE="${5}" | |
echo "deploy_cert called: ${DOMAIN}, ${KEYFILE}, ${CERTFILE}, ${FULLCHAINFILE}, ${CHAINFILE}" | |
# This hook is called once for each certificate that has been | |
# produced. Here you might, for instance, copy your new certificates | |
# to service-specific locations and reload the service. | |
# | |
# Parameters: | |
# - DOMAIN | |
# The primary domain name, i.e. the certificate common | |
# name (CN). | |
# - KEYFILE | |
# The path of the file containing the private key. | |
# - CERTFILE | |
# The path of the file containing the signed certificate. | |
# - FULLCHAINFILE | |
# The path of the file containing the full certificate chain. | |
# - CHAINFILE | |
# The path of the file containing the intermediate certificate(s). | |
} | |
function unchanged_cert { | |
local DOMAIN="${1}" KEYFILE="${2}" CERTFILE="${3}" FULLCHAINFILE="${4}" CHAINFILE="${5}" | |
echo "unchanged_cert called: ${DOMAIN}, ${KEYFILE}, ${CERTFILE}, ${FULLCHAINFILE}, ${CHAINFILE}" | |
# This hook is called once for each certificate that is still | |
# valid and therefore wasn't reissued. | |
# | |
# Parameters: | |
# - DOMAIN | |
# The primary domain name, i.e. the certificate common | |
# name (CN). | |
# - KEYFILE | |
# The path of the file containing the private key. | |
# - CERTFILE | |
# The path of the file containing the signed certificate. | |
# - FULLCHAINFILE | |
# The path of the file containing the full certificate chain. | |
# - CHAINFILE | |
# The path of the file containing the intermediate certificate(s). | |
} | |
exit_hook() { | |
# This hook is called at the end of a dehydrated command and can be used | |
# to do some final (cleanup or other) tasks. | |
: | |
} | |
HANDLER=$1; shift; $HANDLER "$@" |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment