#!/bin/bash H_NAME=$( hostname -f ) LE_SERVICES_SCRIPT_DIR=/usr/lib/acme/hooks LE_CERTS_DIR=/var/lib/acme/live/$H_NAME LE_LOG_DIR=/var/log/letsencrypt PGPOOL2_CERTDIR=/etc/pki/pgpool2 PGPOOL2_KEYFILE=$PGPOOL2_CERTDIR/pgpool2.key DATE=$( date ) [ ! -d $PGPOOL2_CERTDIR ] && mkdir -p $PGPOOL2_CERTDIR [ ! -d $LE_LOG_DIR ] && mkdir $LE_LOG_DIR echo "$DATE" >> $LE_LOG_DIR/pgpool2.log logger "acme-pgpool-hook: Check if the certificate has been renewed" cmp ${LE_CERTS_DIR}/privkey ${PGPOOL2_KEYFILE} RETVAL=$? if [ $RETVAL -eq 0 ] ; then logger "acme-pgpool-hook: No new cerficate" echo "acme-pgpool-hook: No new cerficate" >> $LE_LOG_DIR/pgpool2.log else logger "acme-pgpool-hook: Copying the key file" echo "Copy the key file" >> $LE_LOG_DIR/pgpool2.log /bin/cp -f ${LE_CERTS_DIR}/privkey ${PGPOOL2_KEYFILE} fi chmod 440 ${PGPOOL2_KEYFILE} chown root ${PGPOOL2_KEYFILE} chgrp postgres ${PGPOOL2_KEYFILE} logger "acme-pgpool-hook: Reload the PgPoolII service after a letsencrypt execution" echo "Reload the pgpool2 service" >> $LE_LOG_DIR/pgpool2.log if [ -x /bin/systemctl ] ; then {% if ansible_distribution_file_variety == "Debian" %} systemctl reload pgpool2 >> $LE_LOG_DIR/pgpool2.log 2>&1 {% else %} systemctl reload pgpool2-{{ psql_version }} >> $LE_LOG_DIR/pgpool2.log 2>&1 {% endif %} else service pgpool2 reload >> $LE_LOG_DIR/pgpool2.log 2>&1 fi logger "acme-pgpool-hook: Done" echo "Done." >> $LE_LOG_DIR/pgpool2.log exit 0