BREAKING CHANGE: get a wildcard for the main domain sutty/sutty#13159

certbotd.sh

@@ -46,22 +46,18 @@ case $1 in
     touch "${updated}"
     ;;
   bootstrap)
-    for site in ${SUTTY} api.${SUTTY}; do
+    test -d "/etc/letsencrypt/live/${SUTTY}" && exit 0
-      test -d "/etc/letsencrypt/live/${site}" && exit 0
 
-      # Get the certificate for the domain, the webserver will need
+    # Get a single certificate for the whole domain
-      # access to this directory
+    /usr/bin/certbot \
-      /usr/bin/certbot certonly --email "certbot@${SUTTY}" \
+      -a dns-njalla \
-                                --webroot \
+      --dns-njalla-credentials /etc/letsencrypt/njalla.ini \
+      --email "certbot@${SUTTY}" \
       --agree-tos \
-                                --webroot-path /var/lib/letsencrypt \
+      -d "${SUTTY}" \
-                                -d "${site}"
+      -d "*.${SUTTY}"
-
-      cd /etc/letsencrypt/live
-      ln -s ${SUTTY} default
 
     touch "${updated}"
-    done
 
     ;;
   prune)