Newer
Older
Hj Ahmad Rasyid Hj Ismail
committed
#!/bin/bash
### BEGIN INIT INFO
# Provides: LETSENCRYPT PRE HOOK SCRIPT
# Required-Start: $local_fs $network
# Required-Stop: $local_fs
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: LETSENCRYPT PRE HOOK SCRIPT
# Description: To force open http port 80 to be used by letsencrypt client standlone command
### END INIT INFO
## WE DISABLED THIS DUE TO ISSUES. IF YOU WANT TO USE IT, COPY THIS FILE TO
## /usr/local/ispconfig/server/conf-custom/scripts/
## AND REMOVE THIS CODE PART
if [[ -e "/usr/local/ispconfig/server/conf-custom/scripts/letsencrypt_pre_hook.sh" ]] ; then
. /usr/local/ispconfig/server/conf-custom/scripts/letsencrypt_pre_hook.sh ;
fi
exit 0;
## END OF CODE PART
Hj Ahmad Rasyid Hj Ismail
committed
# You can add support to other firewall
# For RHEL, Centos or derivatives
Hj Ahmad Rasyid Hj Ismail
committed
if which yum &> /dev/null 2>&1 ; then
# Check if web server software is installed, stop it if any
if [ rpm -q nginx ]; then service nginx stop; fi
if [ rpm -q httpd ]; then service httpd stop; fi
Hj Ahmad Rasyid Hj Ismail
committed
# If using firewalld
if [ rpm -q firewalld ] && [ `firewall-cmd --state` = running ]; then
firewall-cmd --zone=public --permanent --add-service=http
firewall-cmd --reload
# If using UFW
elif rpm -q ufw; then
ufw --force enable && ufw allow http
else
fi
Hj Ahmad Rasyid Hj Ismail
committed
# For Debian, Ubuntu or derivatives
Hj Ahmad Rasyid Hj Ismail
committed
elif apt-get -v >/dev/null 2>&1 ; then
# Check if web server software is installed, stop it if any
if [ $(dpkg-query -W -f='${Status}' nginx 2>/dev/null | grep -c "ok installed") -eq 1 ]; then service nginx restart; fi
if [ $(dpkg-query -W -f='${Status}' apache2 2>/dev/null | grep -c "ok installed") -eq 1 ]; then service apache2 restart; fi
Hj Ahmad Rasyid Hj Ismail
committed
# If using UFW
if [ $(dpkg-query -W -f='${Status}' ufw 2>/dev/null | grep -c "ok installed") -eq 1 ]; then
ufw --force enable && ufw allow http
fi
# Try iptables as a final attempt
else
iptables -I INPUT -p tcp --dport 80 -j ACCEPT
service iptables save