haproxy letsencrypt automation

README haproxy letsencrypt

From article:
  https://blog.brixit.nl/automating-letsencrypt-and-haproxy

crontab

# Renew certificates on the first day of every month on a random time
42 0  1 * * /opt/letsencryt-haproxy my-domain.com
37 13 1 * * /opt/letsencrypt-haproxy my-other-domain.com

letsencrypt-haproxy.sh

#!/bin/bash

# Path to the letsencrypt-auto tool
LE_TOOL=/opt/letsencrypt/letsencrypt-auto

# Directory where the acme client puts the generated certs
LE_OUTPUT=/etc/letsencrypt/live

# Create or renew certificate for the domain(s) supplied for this tool
$LE_TOOL --agree-tos --renew-by-default --standalone --standalone-supported-challenges http-01 --http-01-port 9999 certonly -d $@

# Cat the certificate chain and the private key together for haproxy
cat $LE_OUTPUT/$1/{fullchain.pem,privkey.pem} > /etc/haproxy/ssl/${1}.pem

# Reload the haproxy daemon to activate the cert
systemctl reload haproxy