53 lines
1.3 KiB
Bash
53 lines
1.3 KiB
Bash
#!/bin/bash
|
||
|
||
# 定义主域名及其附属域名列表
|
||
declare -A DOMAIN_CERTS=(
|
||
["blog"]="lsy22.com www.lsy22.com"
|
||
["siyun"]="s.lsy22.com"
|
||
["alist"]="o.lsy22.com"
|
||
["gitea"]="g.lsy22.com"
|
||
["bitwarden"]="b.lsy22.com"
|
||
)
|
||
|
||
# 定义要映射的 IP 地址
|
||
MAPPED_IP="121.4.180.183"
|
||
# 邮箱地址（用于 Let's Encrypt 通知）
|
||
EMAIL="lsy22@vip.qq.com"
|
||
# ACME.sh 脚本的路径
|
||
ACME_SH_PATH="/root/.acme.sh/acme.sh"
|
||
# hosts 文件路径
|
||
HOSTS_FILE="/etc/hosts"
|
||
|
||
# 更新 hosts 文件
|
||
for GROUP in "${!DOMAIN_CERTS[@]}"; do
|
||
for DOMAIN in ${DOMAIN_CERTS[$GROUP]}; do
|
||
if ! grep -q "$DOMAIN" "$HOSTS_FILE"; then
|
||
echo "$MAPPED_IP $DOMAIN" >> $HOSTS_FILE
|
||
fi
|
||
done
|
||
done
|
||
|
||
# 更新证书
|
||
ANY_SUCCESS=false
|
||
for GROUP in "${!DOMAIN_CERTS[@]}"; do
|
||
ADDITIONAL_DOMAINS=""
|
||
|
||
for DOMAIN in ${DOMAIN_CERTS[$GROUP]}; do
|
||
ADDITIONAL_DOMAINS="$ADDITIONAL_DOMAINS -d $DOMAIN"
|
||
done
|
||
|
||
# 更新证书
|
||
$ACME_SH_PATH --issue $ADDITIONAL_DOMAINS --webroot /var/www/html --email $EMAIL --renew-hook "systemctl reload nginx"
|
||
|
||
# 检查证书更新结果
|
||
if [ $? -eq 0 ]; then
|
||
ANY_SUCCESS=true
|
||
fi
|
||
done
|
||
|
||
# 如果至少有一个证书更新成功，则重启 Web 服务器（例如 Nginx）
|
||
if [ "$ANY_SUCCESS" = true ]; then
|
||
systemctl reload nginx
|
||
fi
|
||
|
||
exit 0 |