diff options
| author | Daniel Hansson <github@hanssonit.se> | 2021-04-11 18:36:29 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-04-11 18:36:29 +0300 |
| commit | 2e8c2b5763aaad7609d338ab4954678af564e315 (patch) | |
| tree | 97904ad5a9903a6103b842fcbed71024aaf8c827 /addons | |
| parent | e58a408f4596cd100b6d8dc896815083656040b2 (diff) | |
Add DNS updates with deSEC (#1920)
Diffstat (limited to 'addons')
| -rw-r--r-- | addons/desec.sh | 18 |
1 files changed, 13 insertions, 5 deletions
diff --git a/addons/desec.sh b/addons/desec.sh index 12aa27d7..ff94794f 100644 --- a/addons/desec.sh +++ b/addons/desec.sh @@ -89,10 +89,6 @@ done if yesno_box_yes "Do you want to add automatic updates of your WAN IP using ddclient? Please note: this will reset any configuration that might be already in place with ddclient." then - # Add DynDNS - # WANIP6=$(curl -s -k -m 5 https://ipv6bot.whatismyipaddress.com) - # curl --user "$DEDYNDOMAIN":"$DEDYNAUTHTOKEN" \ - # https://update.dedyn.io/?myipv4="$WANIP4"\&myipv6="$WANIP6" >/dev/null 2>&1 export DEDYNDOMAIN export DEDYNAUTHTOKEN run_script NETWORK ddclient-configuration @@ -102,7 +98,19 @@ fi if yesno_box_yes "Do you want to set this domain as your Nextcoud domain \ and activate TLS for your Nextcloud using Let's Encrypt?" then - export DEDYNDOMAIN # Not needed since already exported but added for readability + # Add DNS renewals with the deSEC hoock script + print_text_in_color "$ICyan" "Preparing for DNS-renewals..." + mkdir -p "$SCRIPTS"/deSEC + curl_to_dir "https://raw.githubusercontent.com/desec-io/desec-certbot-hook/master" "hook.sh" "$SCRIPTS"/deSEC + chmod +x "$SCRIPTS"/deSEC/hook.sh + curl_to_dir "https://raw.githubusercontent.com/desec-io/desec-certbot-hook/master" ".dedynauth" "$SCRIPTS"/deSEC + check_command sed -i "s|DEDYN_TOKEN=.*|DEDYN_TOKEN=$DEDYNAUTHTOKEN|g" "$SCRIPTS"/deSEC/.dedynauth + check_command sed -i "s|DEDYN_NAME=.*|DEDYN_NAME=$DEDYNDOMAIN|g" "$SCRIPTS"/deSEC/.dedynauth + msg_box "DNS updates for deSEC are now set. This means you don't have to open any ports (80|443) since deSEC TLS renewals will be run with a built in hook. \ +The hook files will end up in $SCRIPTS/deSEC, please don't touch that folder unless you know what you're doing. \ +You can read more about it here: https://github.com/desec-io/desec-certbot-hook" + + # Run the TLS script run_script LETS_ENC activate-tls fi |