Hackish Certbot HAProxy Script

certfix.sh

#!/bin/bash

# This is intended to work with https://github.com/greenhost/certbot-haproxy

DOMAIN="my.supercool.domain" # Replace this with your actual domain that certbot will be using

# Force renewal of certificate
certbot renew --force-renewal

# Sleep for authorization to complete
sleep 5m

# Create new unified cert
cd /etc/letsencrypt/live/$DOMAIN/
cat fullchain.pem privkey.pem > $DOMAIN.pem

# Move certificate
mv $DOMAIN.pem /opt/certbot/haproxy_fullchains/
# In your HAProxy configuration, you can use crt /opt/certbot/haproxy_fullchains
# note the lack of following slash!

# Restart HAProxy
systemctl restart haproxy