From dc7ecacdd643cd69acbfdc7ca82947ced7859bd0 Mon Sep 17 00:00:00 2001
From: Bryan Call <bcall@apache.org>
Date: Fri, 3 Nov 2023 14:28:17 -0700
Subject: [PATCH] Script for updating certs on docs

---
 bin/update_lets_encrypt_certs | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100755 bin/update_lets_encrypt_certs

diff --git a/bin/update_lets_encrypt_certs b/bin/update_lets_encrypt_certs
new file mode 100755
index 0000000..d39477a
--- /dev/null
+++ b/bin/update_lets_encrypt_certs
@@ -0,0 +1,22 @@
+#!/bin/bash
+
+set -e
+set -x
+
+# Update the certs
+certbot renew -w /home/docs
+
+# Backup the existing certs
+BACKUP_DIR=backup_$(date +%Y_%m_%d-%H:%M)
+cd /opt/ats/etc/trafficserver/certs/
+echo "Backup dir: $BACKUP_DIR"
+mkdir $BACKUP_DIR
+cp -p *.pem $BACKUP_DIR
+
+# Copy over the new certs
+cp -pL /etc/letsencrypt/live/ci.trafficserver.apache.org/* .
+chown nobody:nogroup *.pem
+chmod 400 *.pem
+
+# Restart ATS
+systemctl restart trafficserver