From 98985a956150b3130caddd5c9c790f0866135cc5 Mon Sep 17 00:00:00 2001
From: Wakatatsu Ryou <lialosiu@gmail.com>
Date: Tue, 31 Aug 2021 17:57:43 +0800
Subject: [PATCH] acme: add haproxy support

Signed-off-by: Wakatatsu Ryou <lialosiu@gmail.com>
---
 net/acme/files/run.sh | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/net/acme/files/run.sh b/net/acme/files/run.sh
index a42339daa..1b15bdda3 100644
--- a/net/acme/files/run.sh
+++ b/net/acme/files/run.sh
@@ -20,6 +20,7 @@ DEBUG=0
 NGINX_WEBSERVER=0
 UPDATE_NGINX=0
 UPDATE_UHTTPD=0
+UPDATE_HAPROXY=0
 USER_CLEANUP=
 
 . /lib/functions.sh
@@ -153,6 +154,10 @@ post_checks() {
 		/etc/init.d/nginx restart
 	fi
 
+	if [ -e /etc/init.d/haproxy ] && [ "$UPDATE_HAPROXY" -eq 1 ] ; then
+		/etc/init.d/haproxy restart
+	fi
+
 	if [ -n "$USER_CLEANUP" ] && [ -f "$USER_CLEANUP" ]; then
 		log "Running user-provided cleanup script from $USER_CLEANUP."
 		"$USER_CLEANUP" || return 1
@@ -187,6 +192,7 @@ issue_cert() {
 	local use_staging
 	local update_uhttpd
 	local update_nginx
+	local update_haproxy
 	local keylength
 	local keylength_ecc=0
 	local domains
@@ -206,6 +212,7 @@ issue_cert() {
 	config_get_bool use_staging "$section" use_staging
 	config_get_bool update_uhttpd "$section" update_uhttpd
 	config_get_bool update_nginx "$section" update_nginx
+	config_get_bool update_haproxy "$section" update_haproxy
 	config_get calias "$section" calias
 	config_get dalias "$section" dalias
 	config_get domains "$section" domains
@@ -219,6 +226,7 @@ issue_cert() {
 
 	UPDATE_NGINX=$update_nginx
 	UPDATE_UHTTPD=$update_uhttpd
+	UPDATE_HAPROXY=$update_haproxy
 	USER_CLEANUP=$user_cleanup
 
 	[ "$enabled" -eq "1" ] || return
@@ -340,6 +348,12 @@ issue_cert() {
 		# commit and reload is in post_checks
 	fi
 
+	if [ -e /etc/init.d/haproxy ] && [ -w /etc/haproxy.cfg ] && [ "$update_haproxy" -eq "1" ]; then
+		cat "${domain_dir}/${main_domain}.key" "${domain_dir}/fullchain.cer" > "${domain_dir}/${main_domain}-haproxy.pem"
+		sed -i "s#bind :::443 v4v6 ssl crt .* alpn#bind :::443 v4v6 ssl crt ${domain_dir}/${main_domain}-haproxy.pem alpn#g" /etc/haproxy.cfg
+		# commit and reload is in post_checks
+	fi
+
 	post_checks
 }