56 lines
2.0 KiB
PHP
56 lines
2.0 KiB
PHP
<?php require "../top.inc.php"; ?>
|
|
<p>
|
|
Installer un certificat Let's Encrypt
|
|
</p>
|
|
|
|
<form method="post">
|
|
<label for="domain">Domaine ciblé</label><br>
|
|
<select required="" name="domain">
|
|
<option value="" disabled="" selected="">---</option>
|
|
<?php
|
|
$sites = selectSites($_SESSION['username'], "dns", "http", false);
|
|
$leAvailable = selectSites($_SESSION['username'], "dns", "http", true);
|
|
foreach ($sites as $site) { ?>
|
|
<option value="<?= $site['domain'] ?>"><?= $site['domain'] . " (/ht/" . $site['siteDir'] . ")" ?></option>
|
|
<?php } ?>
|
|
</select>
|
|
<br>
|
|
<input value="Valider" type="submit">
|
|
</form>
|
|
|
|
<?php
|
|
|
|
if (isset($_POST['domain']) AND isset($_SESSION['username'])) {
|
|
|
|
antiCSRF();
|
|
|
|
// Use maniver to use Certbot
|
|
exec(SUDO_PATH . " " . MANIVER_PATH . " le-install " . $_POST['domain'], $output, $returnCode);
|
|
|
|
// Log Certbot response
|
|
addNiverLog($_SESSION['username'] . " installed a Let's Encrypt certificate on their site", $output, $returnCode);
|
|
|
|
// Abort if Certbot failed
|
|
if ($returnCode !== 0)
|
|
exit("Let's Encrypt certificate obtention failed. Try again later, or contact an administrator.");
|
|
|
|
// Replace self-signed certificate by Let's Encrypt certificate in Nginx configuration
|
|
$conf = file_get_contents(NGINX_CONFIG_PATH . "/" . $_POST['domain'] . ".conf");
|
|
$conf = preg_replace("#/etc/ssl/certs/niver\.crt#", "/etc/letsencrypt/live/" . $_POST['domain'] . "/fullchain.pem", $conf);
|
|
$conf = preg_replace("#/etc/ssl/private/niver\.key#", "/etc/letsencrypt/live/" . $_POST['domain'] . "/privkey.pem", $conf);
|
|
file_put_contents(NGINX_CONFIG_PATH . "/" . $_POST['domain'] . ".conf", $conf);
|
|
|
|
// Reload Nginx
|
|
exec(SUDO_PATH . " " . MANIVER_PATH . " reload-nginx", $output, $returnCode);
|
|
|
|
// Abort if Maniver failed to reload Nginx
|
|
if ($returnCode !== 0)
|
|
exit("Nginx configuration reload failed. Try again later, or contact an administrator.");
|
|
|
|
echo "Succès : La connexion avec votre site utilise désomais un certificat TLS émis par Let's Encrypt.";
|
|
}
|
|
|
|
?>
|
|
|
|
<?php require "../bottom.inc.php"; ?>
|