Let’s Encrypt / haproxy certificate deployment hook

hook.sh

#!/bin/bash

# cp hook.sh /etc/letsencrypt/renewal-hooks/deploy/hook.sh
# echo "show ssl cert" | socat stdio /run/haproxy/admin.sock
# https://www.haproxy.com/blog/dynamic-ssl-certificate-storage-in-haproxy

NAME=$(basename ${RENEWED_LINEAGE})
TARGET=/etc/ssl/haproxy/${NAME}.pem

cat $RENEWED_LINEAGE/fullchain.pem $RENEWED_LINEAGE/privkey.pem > $TARGET
echo -e "set ssl cert $TARGET <<\n$(sed '/^[[:space:]]*$/d' $TARGET)\n" | socat stdio /run/haproxy/admin.sock
echo "commit ssl cert $TARGET"                                          | socat stdio /run/haproxy/admin.sock