#!/bin/sh MASQUERADE=${MASQUERADE:-127.0.0.1} ACME_SERVER=${ACME_SERVER:-letsencrypt} ACME_DNS=${ACME_DNS:-myapi} if [ ! -d /acme/cert ] ; then mkdir -p /acme/cert fi if [ -n "${ACME_EMAIL}" ] ; then ACME_EMAIL="--accountemail ${ACME_EMAIL}" fi if [ ! -f "/acme/cert/cert.pem" ] ; then echo "Initializing certificate with acme.sh" # shellcheck disable=SC2086 acme.sh --issue -d "${MASQUERADE}" \ --home /acme \ --dns "${ACME_DNS}" \ --server "${ACME_SERVER}" \ --cert-file /acme/cert/cert.pem \ --key-file /acme/cert/privkey.pem \ --fullchain-file /acme/cert/chain.pem \ --reloadcmd /app/acme-refresh-cert.sh ${ACME_EMAIL} else echo "Certificate ready" fi