- 18 Mar, 2024 1 commit
-
-
neil authored
haproxy deploy hook updates existing certificate over stats socket
-
- 13 Feb, 2024 1 commit
-
-
neil authored
Add SYNO_USE_TEMP_ADMIN variable & Fix broken logic
-
- 12 Feb, 2024 1 commit
-
- 04 Feb, 2024 7 commits
- 03 Feb, 2024 3 commits
- 14 Jan, 2024 1 commit
-
-
neil authored
Fix #4836 (Switch to new Gandi LiveDNS API)
-
- 13 Jan, 2024 2 commits
- 12 Jan, 2024 1 commit
-
-
neil authored
-
- 04 Jan, 2024 2 commits
-
-
neil authored
Fix RouterOS deploy hook for 7
-
Dario Pilori authored
-
- 02 Jan, 2024 1 commit
-
-
neil authored
remove dns_do as it does not work anymore
-
- 24 Dec, 2023 1 commit
-
-
neil authored
Logout update for DSM Deploy script (2727 issue)
-
- 22 Dec, 2023 3 commits
-
-
LordDarkneo authored
-
LordDarkneo authored
#2727 issue when logging out on older version - using variables to unlog only for CERT user
-
LordDarkneo authored
Issue for lougout
-
- 17 Dec, 2023 1 commit
-
-
neil authored
sync
-
- 05 Dec, 2023 3 commits
- 04 Dec, 2023 3 commits
- 03 Dec, 2023 3 commits
- 02 Dec, 2023 1 commit
-
-
neil authored
-
- 01 Dec, 2023 1 commit
-
-
William Lallemand authored
By default acme.sh uses the '*' character in the filename for wildcard. That can be confusing within HAProxy since the * character in front of a filename in the stat socket is used to specified an uncommitted transaction. This patch replace the '*' by a '_' in the filename. This is only done when using the default filename, the name can still be forced with an asterisk.
-
- 30 Nov, 2023 4 commits
-
-
William Lallemand authored
DEPLOY_HAPROXY_MASTER_CLI allows to use the HAProxy master CLI instead of a stats socket for DEPLOY_HAPROXY_HOT_UPDATE="yes" The syntax of the master CLI is slightly different, a prefix with the process number need to be added before any command. This patch uses ${_cmdpfx} in front of every socat commands which is filled when the master CLI is used.
-
William Lallemand authored
DEPLOY_HAPROXY_HOT_UPDATE="yes" now allows to add a new certificate within HAProxy instead of updating an existing one. In order to work, the ${DEPLOY_HAPROXY_PEM_PATH} value must be used as a parameter to the "crt" keyword in the haproxy configuration. The patch uses the following commands over HAProxy stats socket: - show ssl cert - new ssl cert - set ssl cert - commit ssl cert - add ssl crt-list
-
William Lallemand authored
Since version 2.2, HAProxy is able to update dynamically certificates, without a reload. This patch uses socat to push the certificate into HAProxy in order to achieve hot update. With this method, reloading is not required. This should be used only to update an existing certificate in haproxy. 2 new variables are available: - DEPLOY_HAPROXY_HOT_UPDATE="yes" update over the stats socket instead of reloading - DEPLOY_HAPROXY_STATS_SOCKET="UNIX:/run/haproxy/admin.sock" set the path on the stats socket.
-
William Lallemand authored
Sanitize the PEM of the haproxy deploy script by removing the '\n', this way it could be injected directly over the CLI.
-