certbot authenticator nginx

sympa/recipe/sympa.recipe

@@ -8,12 +8,12 @@ FORCE=${FORCE:-false}
 
 function install_postfix {
 	if $FORCE || ! systemctl is-active postfix.service --quiet; then
-        debconf-set-selections <<EOF
+		debconf-set-selections << EOF
 postfix postfix/mailname string $(hostname -f)
 postfix postfix/main_mailer_type string 'Internet Site'
 postfix postfix/mynetworks string '127.0.0.0/8'
 EOF
-        DEBIAN_FRONTEND=noninteractive apt-get install -y postfix postgresql nginx fcgiwrap perl-doc micro debconf-utils
+		DEBIAN_FRONTEND=noninteractive apt-get install -y postfix postgresql nginx fcgiwrap perl-doc micro debconf-utils certbot python3-certbot-nginx
 		postconf -e "inet_protocols = ipv4"
 		systemctl restart postfix
 		echo postfix installed successfully!
@@ -33,7 +33,7 @@ function install_sympa {
 	if $FORCE || ! systemctl is-active wwsympa.service --quiet; then
 		listmasters="pvincent@artcode.re,jnoel@mithril.re"
 		[[ $(hostname -d) == *.* ]] && listmasters+=",listmaster@$(hostname -d)" || true
-        debconf-set-selections <<EOF
+		debconf-set-selections << EOF
 sympa wwsympa/webserver_type select 'Other'
 sympa sympa/database-type string pgsql
 sympa sympa/db_host string localhost
@@ -55,7 +55,7 @@ EOF
 
 function install_nginx_host {
 	if $FORCE || [[ ! -f /etc/nginx/sites-available/sympa.conf ]]; then
-        cat <<EOF >/etc/nginx/sites-available/sympa.conf
+		cat << EOF > /etc/nginx/sites-available/sympa.conf
 server {
     listen 80;
     server_name _;

sympa/resources/tools/sympa_export.bash

@@ -36,7 +36,7 @@ function export_files {
 
 function export_certbot {
 	if [[ -d /etc/letsencrypt/live/$SYMPA_DOMAIN ]]; then
-		tar -C / -cf "$temp_dir/certbot.tar" etc/letsencrypt
+		tar -C / --exclude etc/letsencrypt/cli.ini -cf "$temp_dir/certbot.tar" etc/letsencrypt
 	fi
 }
 

sympa/resources/tools/sympa_import.bash

@@ -111,10 +111,20 @@ function import_certbot {
 	SYMPA_DOMAIN=$(grep '^domain' /etc/sympa/sympa/sympa.conf | cut -f2)
 
 	if [[ -f "$export_tmp/certbot.tar" ]]; then
-		echo -n "import certbot..."
+		echo "certbot save previous cli.ini"
+		cp /etc/letsencrypt/cli.ini "$export_tmp/
+
+		echo "import certbot..."
 		rm -rf /etc/letsencrypt
 		tar -xf "$export_tmp/certbot.tar" -C /
 		echo OK
+		
+		echo "certbot restore previous cli.ini"
+		mv "$export_tmp/cli.ini /etc/letsencrypt/
+
+		echo "convert certbot apache2 authenticator to certbotx nginx authenticator"
+		/opt/miaou-bash/tools/append_or_replace '^authenticator =.*$' "authenticator = nginx" /etc/letsencrypt/renewal/$SYMPA_DOMAIN.conf
+		/opt/miaou-bash/tools/append_or_replace '^installer =.*$' "installer = nginx" /etc/letsencrypt/renewal/$SYMPA_DOMAIN.conf
 	fi
 
 	# add options-ssl-nginx.conf