lego.sh

export DNSPOD_API_KEY=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
export DNSPOD_HTTP_TIMEOUT=100000000

CMD=run
CMD=renew

N=.lego/certificates/svc.cool


if ! openssl x509 -checkend 864000 -in $N.crt; then

lego --dns dnspod --email lwzm@qq.com \
	-d 'svc.cool' \
	-d '*.svc.cool' \
	$CMD

kubectl create secret tls lego --cert $N.crt --key $N.key --dry-run=client -o yaml | kubectl -n q apply -f -

fi

exit