Pin acme.sh in setup script

nodemailer · Aug 24, 2023 · b4a1a1b · b4a1a1b
1 parent 58937b7
commit b4a1a1b
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/setup/13_install_ssl_certs.sh b/setup/13_install_ssl_certs.sh
@@ -6,8 +6,12 @@ echo -e "\n-- Executing ${ORANGE}${OURNAME}${NC} subscript --"
 
 #### SSL CERTS ####
 
-curl https://get.acme.sh | sh
+# Install acme.sh
+# NOTE: the version 3.0.7 has a bug with Nginx certs, so version is pinned to 3.0.6
+ACME_VERSION="3.0.6"
+curl https://raw.githubusercontent.com/acmesh-official/acme.sh/${ACME_VERSION}/acme.sh | sh -s -- --install --auto-upgrade 0
 
+# WildDuck TLS config
 echo 'cert="/etc/wildduck/certs/fullchain.pem"
 key="/etc/wildduck/certs/privkey.pem"' > /etc/wildduck/tls.toml
 

diff --git a/setup/14_install_start_services.sh b/setup/14_install_start_services.sh
@@ -13,7 +13,7 @@ systemctl restart rsyslog
 # update reload script for future updates
 echo "#!/bin/bash
 $SYSTEMCTL_PATH reload nginx
-$SYSTEMCTL_PATH reload wildduck
+$SYSTEMCTL_PATH restart wildduck
 $SYSTEMCTL_PATH restart zone-mta
 $SYSTEMCTL_PATH restart haraka
 $SYSTEMCTL_PATH restart wildduck-webmail" > /usr/local/bin/reload-services.sh