accounting/bench
2
0
Fork 0
mirror of https://github.com/frappe/bench.git synced 2025-01-26 08:08:23 +00:00
Code Issues Releases Activity

Setup lets-encrypt for custom domains (#301)

Browse Source
This commit is contained in:
Valmik 2016-10-13 11:48:22 +05:30 committed by Rushabh Mehta
parent 14215b8551
commit 1783cbc84f
2 changed files with 33 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
bench/commands/setup.py Normal file → Executable file
View File

@ -78,10 +78,11 @@ def setup_env():
@click.command('lets-encrypt') @click.command('lets-encrypt')
@click.argument('site') @click.argument('site')
def setup_letsencrypt(site): @click.option('--custom-domain')
def setup_letsencrypt(site, custom_domain):
"Setup lets-encrypt for site" "Setup lets-encrypt for site"
from bench.config.lets_encrypt import setup_letsencrypt from bench.config.lets_encrypt import setup_letsencrypt
setup_letsencrypt(site, bench_path='.') setup_letsencrypt(site, custom_domain, bench_path='.')
@click.command('procfile') @click.command('procfile')

43
bench/config/lets_encrypt.py
View File

@ -1,18 +1,29 @@
import bench, os, click, errno, urllib import bench, os, click, errno, urllib
from bench.utils import exec_cmd, CommandFailedError from bench.utils import exec_cmd, CommandFailedError
from bench.config.site_config import update_site_config from bench.config.site_config import update_site_config, remove_domain, get_domains
from bench.config.nginx import make_nginx_conf from bench.config.nginx import make_nginx_conf
from bench.config.production_setup import service from bench.config.production_setup import service
from bench.config.common_site_config import get_config from bench.config.common_site_config import get_config
from crontab import CronTab from crontab import CronTab
def setup_letsencrypt(site, bench_path): def setup_letsencrypt(site, custom_domain, bench_path):
site_path = os.path.join(bench_path, "sites", site, "site_config.json") site_path = os.path.join(bench_path, "sites", site, "site_config.json")
if not os.path.exists(os.path.dirname(site_path)): if not os.path.exists(os.path.dirname(site_path)):
print "No site named "+site print "No site named "+site
return return
if custom_domain:
domains = get_domains(site, bench_path)
for d in domains:
if (isinstance(d, dict) and d['domain']==custom_domain):
print "SSL for Domain {0} already exists".format(custom_domain)
return
if not custom_domain in domains:
print "No custom domain named {0} set for site".format(custom_domain)
return
click.confirm('Running this will stop the nginx service temporarily causing your sites to go offline\n' click.confirm('Running this will stop the nginx service temporarily causing your sites to go offline\n'
'Do you want to continue?', 'Do you want to continue?',
abort=True) abort=True)
@ -21,39 +32,45 @@ def setup_letsencrypt(site, bench_path):
print "You cannot setup SSL without DNS Multitenancy" print "You cannot setup SSL without DNS Multitenancy"
return return
create_config(site) create_config(site, custom_domain)
run_certbot_and_setup_ssl(site, bench_path) run_certbot_and_setup_ssl(site, custom_domain, bench_path)
setup_crontab() setup_crontab()
def create_config(site): def create_config(site, custom_domain):
config = bench.env.get_template('letsencrypt.cfg').render(domain=site) config = bench.env.get_template('letsencrypt.cfg').render(domain=custom_domain or site)
config_path = '/etc/letsencrypt/configs/{site}.cfg'.format(site=site) config_path = '/etc/letsencrypt/configs/{site}.cfg'.format(site=custom_domain or site)
create_dir_if_missing(config_path) create_dir_if_missing(config_path)
with open(config_path, 'w') as f: with open(config_path, 'w') as f:
f.write(config) f.write(config)
def run_certbot_and_setup_ssl(site, bench_path): def run_certbot_and_setup_ssl(site, custom_domain, bench_path):
service('nginx', 'stop') service('nginx', 'stop')
get_certbot() get_certbot()
try: try:
exec_cmd("{path} --config /etc/letsencrypt/configs/{site}.cfg certonly".format(path=get_certbot_path(), site=site)) exec_cmd("{path} --config /etc/letsencrypt/configs/{site}.cfg certonly".format(path=get_certbot_path(), site=custom_domain or site))
except CommandFailedError: except CommandFailedError:
service('nginx', 'start') service('nginx', 'start')
print "There was a problem trying to setup SSL for your site" print "There was a problem trying to setup SSL for your site"
return return
ssl_path = "/etc/letsencrypt/live/{site}/".format(site=site) ssl_path = "/etc/letsencrypt/live/{site}/".format(site=custom_domain or site)
ssl_config = { "ssl_certificate": os.path.join(ssl_path, "fullchain.pem"), ssl_config = { "ssl_certificate": os.path.join(ssl_path, "fullchain.pem"),
"ssl_certificate_key": os.path.join(ssl_path, "privkey.pem") } "ssl_certificate_key": os.path.join(ssl_path, "privkey.pem") }
update_site_config(site, ssl_config, bench_path=bench_path) if custom_domain:
remove_domain(site, custom_domain, bench_path)
domains = get_domains(site, bench_path)
ssl_config['domain'] = custom_domain
domains.append(ssl_config)
update_site_config(site, { "domains": domains }, bench_path=bench_path)
else:
update_site_config(site, ssl_config, bench_path=bench_path)
make_nginx_conf(bench_path) make_nginx_conf(bench_path)
service('nginx', 'start') service('nginx', 'start')