You've already forked certbot-ubuntu
115 lines
2.5 KiB
Bash
Executable File
115 lines
2.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
# Author : Allan Christensen
|
|
# First Created : 08042022 (DD-MM-YYYY)
|
|
# Description : Installs Certbot with Cloudflare and Dns Challenge on Ubuntu 24.04
|
|
# License : MIT License (see LICENSE file for details)
|
|
|
|
#
|
|
# Are we root
|
|
#
|
|
if [[ $(id -u) -ne 0 ]]; then echo "" && echo "Must be root or use sudo" && echo "" ; exit ; fi
|
|
|
|
#
|
|
# If snap is not installed then die
|
|
#
|
|
if ! command -v snap >/dev/null 2>&1; then echo "ERROR: snap is not installed aborting" ; exit 1 ; fi
|
|
|
|
#
|
|
# Function usage
|
|
#
|
|
usage () {
|
|
printf -- "\ncertbotinstall\n\n"
|
|
printf -- "Note: Must be run as root or using sudo\n\n"
|
|
printf -- "Usage:\n"
|
|
printf -- "sudo ./certbotinstall [-p] <API Token>\n"
|
|
printf -- " [-h] <this screen>\n\n"
|
|
printf -- "Examples:\n"
|
|
printf -- "sudo ./certbotinstall -p 1234AkkbdceewEFJK\n\n"
|
|
}
|
|
|
|
#
|
|
# Let's go
|
|
#
|
|
clear
|
|
|
|
|
|
#
|
|
# Check if no arguments were given
|
|
#
|
|
if [[ $# -eq 0 ]]; then usage; exit 1; fi
|
|
|
|
#
|
|
# Manual argument parsing
|
|
#
|
|
while [[ $# -gt 0 ]]; do
|
|
case "$1" in
|
|
-p)
|
|
shift
|
|
if [[ -z "$1" ]]; then
|
|
usage
|
|
printf "ERROR: API TOKEN CANNOT BE EMPTY!\n\n"
|
|
exit 1
|
|
fi
|
|
apitoken="$1"
|
|
|
|
#
|
|
# Validate Cloudflare API token format
|
|
#
|
|
if [[ "$apitoken" =~ [[:space:]] ]]; then
|
|
printf "\nERROR: API token cannot contain spaces or line breaks.\n\n"
|
|
exit 1
|
|
fi
|
|
|
|
if [[ ! "$apitoken" =~ ^[A-Za-z0-9_-]{20,120}$ ]]; then
|
|
printf "\nERROR: Invalid API token format.\n"
|
|
printf "Expected 20-120 characters (A-Z, a-z, 0-9, - or _).\n\n"
|
|
exit 1
|
|
fi
|
|
|
|
shift
|
|
;;
|
|
-h)
|
|
usage
|
|
exit 0
|
|
;;
|
|
*)
|
|
usage
|
|
printf "\nType: sudo %s -h for help\n\n" "$0"
|
|
exit 1
|
|
;;
|
|
esac
|
|
done
|
|
|
|
#
|
|
# Install Certbot
|
|
#
|
|
snap install core && snap refresh core
|
|
snap install --classic certbot
|
|
ln -sf /snap/bin/certbot /usr/bin/certbot
|
|
|
|
#
|
|
# Install Cloudflare plugin
|
|
#
|
|
snap set certbot trust-plugin-with-root=ok
|
|
snap install certbot-dns-cloudflare
|
|
|
|
#
|
|
# Create the directory and the file that will store the api token
|
|
#
|
|
mkdir -p /etc/letsencrypt
|
|
cat > /etc/letsencrypt/dnscloudflare.ini <<EOT
|
|
# Cloudflare API token used by Certbot
|
|
dns_cloudflare_api_token = $apitoken
|
|
EOT
|
|
chmod 0600 /etc/letsencrypt/dnscloudflare.ini
|
|
|
|
#
|
|
# All done
|
|
#
|
|
printf "\nAll Done...\n\n"
|
|
|
|
#
|
|
# End of script
|
|
#
|