Беседка

Код: Выделить всё

#!/bin/bash
for DOM in $(cat /etc/nginx/nginx.conf|egrep "^ *server_name .*;$"|tr -s ' '|tr -d ';'|cut -d" " -f3|egrep -v "^_$");do
  CERT=$(cat /etc/nginx/nginx.conf|egrep -o "ssl_certificate .*/$DOM/.*\.pem"|cut -d" " -f2)

  [  -z $CERT ] && { echo "$DOM cert is missing, issue new";certbot --nginx -d $DOM; continue;}

  #Get lowest (nearest) certificate expiration date (from whole chain), in seconds
  CERT_EXPIRES=$(while openssl x509 -noout -text; do :; done < $CERT 2>/dev/null|egrep "Not After : .*GMT$"|sed 's/ : /~/g'|cut -d"~" -f2|xargs -I DD date -d "DD" +%s|sort|head -1)

  #If CERT_EXPIRES in three days (259200 seconds), then reissue it
  [ $(expr $CERT_EXPIRES - $(date +%s) - 259200) -le 0 ] && { echo "$DOM cert expire(s|d), reissuing";certbot --nginx -d $DOM;}
done