This commit is contained in:
2026-07-18 20:54:48 +08:00
parent 452be6c0a5
commit ca957385f2
9 changed files with 115 additions and 18 deletions
+5 -4
View File
@@ -9,7 +9,8 @@ $CheckCmd = "{{ check_cmd }}"
$ReloadCmd = "{{ reload_cmd }}"
# ===========================
$TmpDir = "$env:TEMP\cert-sync-$Domain"
$EncodedDomain = [System.Uri]::EscapeDataString($Domain)
$TmpDir = "$env:TEMP\cert-sync-$($Domain -replace '[*\.]','_')"
$VersionFile = "$CertDir\.version"
New-Item -ItemType Directory -Force -Path $CertDir, $TmpDir | Out-Null
@@ -19,13 +20,13 @@ $headers = @{ Authorization = "Bearer $Token" }
[System.Net.ServicePointManager]::ServerCertificateValidationCallback = { $true }
# 1. 检查版本
$remote = (Invoke-WebRequest -Uri "$BaseUrl/api/version/$Domain" -Headers $headers -UseBasicParsing -SkipCertificateCheck).Content.Trim()
$remote = (Invoke-WebRequest -Uri "$BaseUrl/api/version?domain=$EncodedDomain" -Headers $headers -UseBasicParsing -SkipCertificateCheck).Content.Trim()
$local = if (Test-Path $VersionFile) { (Get-Content $VersionFile).Trim() } else { "0" }
if ($remote -eq $local) { exit 0 }
# 2. 下载证书
Invoke-WebRequest -Uri "$BaseUrl/api/cert/$Domain/fullchain" -Headers $headers -OutFile "$TmpDir\fullchain.pem" -UseBasicParsing -SkipCertificateCheck
Invoke-WebRequest -Uri "$BaseUrl/api/cert/$Domain/private" -Headers $headers -OutFile "$TmpDir\private.key" -UseBasicParsing -SkipCertificateCheck
Invoke-WebRequest -Uri "$BaseUrl/api/cert/fullchain?domain=$EncodedDomain" -Headers $headers -OutFile "$TmpDir\fullchain.pem" -UseBasicParsing -SkipCertificateCheck
Invoke-WebRequest -Uri "$BaseUrl/api/cert/private?domain=$EncodedDomain" -Headers $headers -OutFile "$TmpDir\private.key" -UseBasicParsing -SkipCertificateCheck
# 3. 备份旧证书
Copy-Item "$CertDir\fullchain.pem" "$CertDir\fullchain.pem.bak" -ErrorAction SilentlyContinue
+4 -4
View File
@@ -10,10 +10,10 @@ CHECK_CMD="{{ check_cmd }}"
RELOAD_CMD="{{ reload_cmd }}"
# ===========================
VERSION_URL="${BASE_URL}/api/version/${DOMAIN}"
FULLCHAIN_URL="${BASE_URL}/api/cert/${DOMAIN}/fullchain"
PRIVATE_URL="${BASE_URL}/api/cert/${DOMAIN}/private"
TMP_DIR="/tmp/cert-sync-${DOMAIN}"
VERSION_URL="${BASE_URL}/api/version?domain=${DOMAIN}"
FULLCHAIN_URL="${BASE_URL}/api/cert/fullchain?domain=${DOMAIN}"
PRIVATE_URL="${BASE_URL}/api/cert/private?domain=${DOMAIN}"
TMP_DIR="/tmp/cert-sync-${DOMAIN//\*/_}"
VERSION_FILE="${CERT_DIR}/.version"
mkdir -p "${CERT_DIR}" "${TMP_DIR}"