mirror of
https://github.com/docker-mailserver/docker-mailserver.git
synced 2024-01-19 02:48:50 +00:00
fix: Monitor for changes in supported letsencrypt locations (#2279)
Previously we only monitored for `$HOSTNAME` in `/etc/letsencrypt/live` and only for hard-coded `.pem` filenames. This ensures we check the locations of other locations that may not match `$HOSTNAME`, which we also support. Ideally in future at least the directory to look in would be better known in advance..
This commit is contained in:
parent
b1a74bd47a
commit
917f0f6a9c
|
@ -260,6 +260,19 @@ CHKSUM_FILE=/tmp/docker-mailserver-config-chksum
|
||||||
# Compute checksums of monitored files.
|
# Compute checksums of monitored files.
|
||||||
function _monitored_files_checksums
|
function _monitored_files_checksums
|
||||||
{
|
{
|
||||||
|
# If a wildcard path pattern (or an empty ENV) would yield an invalid path
|
||||||
|
# or no results, `shopt -s nullglob` prevents it from being added.
|
||||||
|
shopt -s nullglob
|
||||||
|
|
||||||
|
# React to any cert changes within the following letsencrypt locations:
|
||||||
|
local DYNAMIC_FILES
|
||||||
|
for FILE in /etc/letsencrypt/live/"${SSL_DOMAIN}"/*.pem \
|
||||||
|
/etc/letsencrypt/live/"${HOSTNAME}"/*.pem \
|
||||||
|
/etc/letsencrypt/live/"${DOMAINNAME}"/*.pem
|
||||||
|
do
|
||||||
|
DYNAMIC_FILES="${DYNAMIC_FILES} ${FILE}"
|
||||||
|
done
|
||||||
|
|
||||||
(
|
(
|
||||||
cd /tmp/docker-mailserver || exit 1
|
cd /tmp/docker-mailserver || exit 1
|
||||||
exec sha512sum 2>/dev/null -- \
|
exec sha512sum 2>/dev/null -- \
|
||||||
|
@ -268,9 +281,7 @@ function _monitored_files_checksums
|
||||||
postfix-aliases.cf \
|
postfix-aliases.cf \
|
||||||
dovecot-quotas.cf \
|
dovecot-quotas.cf \
|
||||||
/etc/letsencrypt/acme.json \
|
/etc/letsencrypt/acme.json \
|
||||||
"/etc/letsencrypt/live/${HOSTNAME}/key.pem" \
|
"${DYNAMIC_FILES}"
|
||||||
"/etc/letsencrypt/live/${HOSTNAME}/privkey.pem" \
|
|
||||||
"/etc/letsencrypt/live/${HOSTNAME}/fullchain.pem"
|
|
||||||
)
|
)
|
||||||
}
|
}
|
||||||
export -f _monitored_files_checksums
|
export -f _monitored_files_checksums
|
||||||
|
|
Loading…
Reference in a new issue