valitovgaziz
8e766b540e
- sites.yml — единый источник истины для всех сайтов - generate-configs.sh — генератор nginx конфигов, certbot domains.txt, .env - nginx: per-domain HTTPS (вместо all-or-nothing switch-config) - certbot: единый renew-all.sh, динамический init (без 5 дублирующих скриптов) - backup: контейнер с pg_dump + rclone (Яндекс.Диск), ежедневно в 3AM - Gitea + Gitea Runner в docker-compose (self-hosted Git + CI/CD) - .gitea/workflows/deploy.yml — CI/CD pipeline: push → авто-деплой - Makefile: generate-configs, reconfig, deploy, backup, restore, gitea, help
38 lines
1.2 KiB
Bash
Executable File
38 lines
1.2 KiB
Bash
Executable File
#!/bin/bash
|
|
# entrypoint.sh — per-domain HTTPS переключение
|
|
# Для каждого домена проверяет сертификат и активирует SSL или HTTP конфиг
|
|
set -euo pipefail
|
|
|
|
CONF_AVAILABLE="/etc/nginx/conf.available"
|
|
CONF_D="/etc/nginx/conf.d"
|
|
CERT_DIR="/etc/letsencrypt/live"
|
|
|
|
rm -f "$CONF_D"/*.conf
|
|
|
|
# базовый HTTP (ACME challenge, catch-all redirect)
|
|
if [ -f "$CONF_AVAILABLE/00-http.conf" ]; then
|
|
ln -sf "$CONF_AVAILABLE/00-http.conf" "$CONF_D/00-http.conf"
|
|
fi
|
|
|
|
# per-domain конфиги
|
|
shopt -s nullglob
|
|
for ssl_conf in "$CONF_AVAILABLE"/*.ssl.conf; do
|
|
base="$(basename "$ssl_conf" .ssl.conf)"
|
|
http_conf="$CONF_AVAILABLE/$base.http.conf"
|
|
|
|
# CERT_DOMAIN в первой строке: # CERT_DOMAIN=example.ru
|
|
cert_domain="$(head -1 "$ssl_conf" | grep -oP '(?<=# CERT_DOMAIN=).+')" || true
|
|
|
|
if [ -n "$cert_domain" ] && [ -f "$CERT_DIR/$cert_domain/fullchain.pem" ]; then
|
|
ln -sf "$ssl_conf" "$CONF_D/$base.ssl.conf"
|
|
echo " ✓ $base → HTTPS ($cert_domain)"
|
|
elif [ -f "$http_conf" ]; then
|
|
ln -sf "$http_conf" "$CONF_D/$base.http.conf"
|
|
echo " ✓ $base → HTTP (no cert for $cert_domain)"
|
|
fi
|
|
done
|
|
|
|
echo "---"
|
|
ls -la "$CONF_D/" | grep -v '^total'
|
|
nginx -t
|