mirror of
				https://github.com/acmesh-official/acme.sh
				synced 2025-11-04 13:55:56 +08:00 
			
		
		
		
	deploy/routeros.sh: make ssh/scp configurable
In order to modify ssh/scp commands make them configurable via environment variables. Signed-off-by: Andreas Bießmann <andreas@biessmann.org>
This commit is contained in:
		@@ -49,6 +49,16 @@
 | 
			
		||||
# One optional thing to do as well is to create a script that updates
 | 
			
		||||
# all the required services and run that script in a single command.
 | 
			
		||||
#
 | 
			
		||||
# To adopt parameters to `scp` and/or `ssh` set the optional
 | 
			
		||||
# `ROUTER_OS_SSH_CMD` and `ROUTER_OS_SCP_CMD` variables accordingly,
 | 
			
		||||
# see ssh(1) and scp(1) for parameters to those commands.
 | 
			
		||||
#
 | 
			
		||||
# Example:
 | 
			
		||||
# ```ssh
 | 
			
		||||
# export ROUTER_OS_SSH_CMD="ssh -i /acme.sh/.ssh/router.example.com -o UserKnownHostsFile=/acme.sh/.ssh/known_hosts"
 | 
			
		||||
# export ROUTER_OS_SCP_CMD="scp -i /acme.sh/.ssh/router.example.com -o UserKnownHostsFile=/acme.sh/.ssh/known_hosts"
 | 
			
		||||
# ````
 | 
			
		||||
#
 | 
			
		||||
# returns 0 means success, otherwise error.
 | 
			
		||||
 | 
			
		||||
########  Public functions #####################
 | 
			
		||||
@@ -88,6 +98,20 @@ routeros_deploy() {
 | 
			
		||||
    ROUTER_OS_PORT=22
 | 
			
		||||
  fi
 | 
			
		||||
 | 
			
		||||
  _getdeployconf ROUTER_OS_SSH_CMD
 | 
			
		||||
 | 
			
		||||
  if [ -z "$ROUTER_OS_SSH_CMD" ]; then
 | 
			
		||||
    _debug "Use default ssh setup."
 | 
			
		||||
    ROUTER_OS_SSH_CMD="ssh -p $ROUTER_OS_PORT"
 | 
			
		||||
  fi
 | 
			
		||||
 | 
			
		||||
  _getdeployconf ROUTER_OS_SCP_CMD
 | 
			
		||||
 | 
			
		||||
  if [ -z "$ROUTER_OS_SCP_CMD" ]; then
 | 
			
		||||
    _debug "USe default scp setup."
 | 
			
		||||
    ROUTER_OS_SCP_CMD="scp -P $ROUTER_OS_PORT"
 | 
			
		||||
  fi
 | 
			
		||||
 | 
			
		||||
  _getdeployconf ROUTER_OS_ADDITIONAL_SERVICES
 | 
			
		||||
 | 
			
		||||
  if [ -z "$ROUTER_OS_ADDITIONAL_SERVICES" ]; then
 | 
			
		||||
@@ -98,12 +122,14 @@ routeros_deploy() {
 | 
			
		||||
  _savedeployconf ROUTER_OS_HOST "$ROUTER_OS_HOST"
 | 
			
		||||
  _savedeployconf ROUTER_OS_USERNAME "$ROUTER_OS_USERNAME"
 | 
			
		||||
  _savedeployconf ROUTER_OS_PORT "$ROUTER_OS_PORT"
 | 
			
		||||
  _savedeployconf ROUTER_OS_SSH_CMD "$ROUTER_OS_SSH_CMD"
 | 
			
		||||
  _savedeployconf ROUTER_OS_SCP_CMD "$ROUTER_OS_SCP_CMD"
 | 
			
		||||
  _savedeployconf ROUTER_OS_ADDITIONAL_SERVICES "$ROUTER_OS_ADDITIONAL_SERVICES"
 | 
			
		||||
 | 
			
		||||
  _info "Trying to push key '$_ckey' to router"
 | 
			
		||||
  scp -P "$ROUTER_OS_PORT" "$_ckey" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.key"
 | 
			
		||||
  $ROUTER_OS_SCP_CMD "$_ckey" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.key"
 | 
			
		||||
  _info "Trying to push cert '$_cfullchain' to router"
 | 
			
		||||
  scp -P "$ROUTER_OS_PORT" "$_cfullchain" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.cer"
 | 
			
		||||
  $ROUTER_OS_SCP_CMD "$_cfullchain" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.cer"
 | 
			
		||||
  DEPLOY_SCRIPT_CMD="/system script add name=\"LE Cert Deploy - $_cdomain\" owner=admin policy=ftp,read,write,password,sensitive \
 | 
			
		||||
source=\"## generated by routeros deploy script in acme.sh;\
 | 
			
		||||
\n/certificate remove [ find name=$_cdomain.cer_0 ];\
 | 
			
		||||
@@ -120,11 +146,11 @@ source=\"## generated by routeros deploy script in acme.sh;\
 | 
			
		||||
\n\"
 | 
			
		||||
"
 | 
			
		||||
  # shellcheck disable=SC2029
 | 
			
		||||
  ssh -p "$ROUTER_OS_PORT" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "$DEPLOY_SCRIPT_CMD"
 | 
			
		||||
  $ROUTER_OS_SSH_CMD "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "$DEPLOY_SCRIPT_CMD"
 | 
			
		||||
  # shellcheck disable=SC2029
 | 
			
		||||
  ssh -p "$ROUTER_OS_PORT" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "/system script run \"LE Cert Deploy - $_cdomain\""
 | 
			
		||||
  $ROUTER_OS_SSH_CMD "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "/system script run \"LE Cert Deploy - $_cdomain\""
 | 
			
		||||
  # shellcheck disable=SC2029
 | 
			
		||||
  ssh -p "$ROUTER_OS_PORT" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "/system script remove \"LE Cert Deploy - $_cdomain\""
 | 
			
		||||
  $ROUTER_OS_SSH_CMD "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" "/system script remove \"LE Cert Deploy - $_cdomain\""
 | 
			
		||||
 | 
			
		||||
  return 0
 | 
			
		||||
}
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user