875a60f90f
A free, open, self-hosted app platform (GNU AGPLv3): one-click app deploys, Traefik reverse proxy with automatic SSL, rootless Docker support, gluetun VPN routing, and a web dashboard to manage it all. Free & open forever to self-host; optional paid hosted services fund it. See PROMISE.md. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> Signed-off-by: librelad <librelad@digitalangels.vip>
74 lines
2.1 KiB
Bash
Executable File
74 lines
2.1 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
checkSSLCertsRequirement()
|
|
{
|
|
if [[ $CFG_REQUIREMENT_SSLCERTS == "true" ]]; then
|
|
### SSL Certificates
|
|
# Get current configured domains
|
|
configured_domains=()
|
|
for domain_num in {1..9}; do
|
|
domain_var="CFG_DOMAIN_$domain_num"
|
|
domain_value="${!domain_var}"
|
|
if [ -n "$domain_value" ]; then
|
|
configured_domains+=("$domain_value")
|
|
fi
|
|
done
|
|
|
|
# Get existing certificate domains
|
|
existing_domains=()
|
|
if [ -d "$ssl_dir" ]; then
|
|
for cert_file in "$ssl_dir"/*.crt; do
|
|
if [ -f "$cert_file" ]; then
|
|
domain_name=$(basename "$cert_file" .crt)
|
|
existing_domains+=("$domain_name")
|
|
fi
|
|
done
|
|
fi
|
|
|
|
# Check for missing certificates
|
|
missing_ssl=()
|
|
for domain_value in "${configured_domains[@]}"; do
|
|
key_file="$ssl_dir/${domain_value}.key"
|
|
crt_file="$ssl_dir/${domain_value}.crt"
|
|
|
|
if [ -f "$key_file" ] && [ -f "$crt_file" ]; then
|
|
isSuccessful "Certificate for domain $domain_value installed."
|
|
else
|
|
missing_ssl+=("$domain_value")
|
|
isNotice "Certificate for domain $domain_value not found."
|
|
fi
|
|
done
|
|
|
|
# Check for obsolete certificates that need removal
|
|
obsolete_ssl=()
|
|
for existing_domain in "${existing_domains[@]}"; do
|
|
# Skip if this domain is still configured
|
|
is_still_configured=false
|
|
for configured_domain in "${configured_domains[@]}"; do
|
|
if [ "$existing_domain" == "$configured_domain" ]; then
|
|
is_still_configured=true
|
|
break
|
|
fi
|
|
done
|
|
|
|
if [ "$is_still_configured" == false ]; then
|
|
obsolete_ssl+=("$existing_domain")
|
|
isNotice "Certificate for domain $existing_domain is no longer configured and will be removed."
|
|
fi
|
|
done
|
|
|
|
# Determine if SSL setup is needed
|
|
if [ ${#missing_ssl[@]} -eq 0 ] && [ ${#obsolete_ssl[@]} -eq 0 ]; then
|
|
isSuccessful "SSL certificates are setup correctly for all domains."
|
|
SkipSSLInstall=true
|
|
else
|
|
if [ ${#missing_ssl[@]} -gt 0 ]; then
|
|
isNotice "SSL certificates are missing for domains: ${missing_ssl[*]}"
|
|
fi
|
|
if [ ${#obsolete_ssl[@]} -gt 0 ]; then
|
|
isNotice "SSL certificates will be removed for domains: ${obsolete_ssl[*]}"
|
|
fi
|
|
((preinstallneeded++))
|
|
fi
|
|
fi
|
|
} |