ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: usr / local / lib / node_modules / ghost-cli / extensions / nginx

'use strict';
const fs = require('fs-extra');
const os = require('os');
const url = require('url');
const path = require('path');

const cli = require('../../lib');

function migrateSSL(ctx, migrateTask) {
    const replace = require('replace-in-file');
    const acme = require('./acme');

const parsedUrl = url.parse(ctx.instance.config.get('url'));
    const confFile = path.join(ctx.instance.dir, 'system', 'files', `${parsedUrl.hostname}-ssl.conf`);
    const rootPath = path.resolve(ctx.instance.dir, 'system', 'nginx-root');

// Case to skip 1: SSL config for nginx does not exist
    if (!fs.existsSync(confFile)) {
        return migrateTask.skip('SSL config has not been set up for this domain');
    }

const originalAcmePath = path.join(os.homedir(), '.acme.sh');
    const originalCertFolder = path.join(originalAcmePath, parsedUrl.hostname);

// Case to skip 2: SSL cert doesn't exist in the original location for this domain
    if (!fs.existsSync(originalCertFolder)) {
        return migrateTask.skip('SSL cert does not exist for this domain');
    }

const confFileContents = fs.readFileSync(confFile, {encoding: 'utf8'});
    const certCheck = new RegExp(`ssl_certificate ${originalCertFolder}/fullchain.cer;`);

// Case to skip 3: SSL conf does not contain a cert config using the old LE cert
    if (!certCheck.test(confFileContents)) {
        return migrateTask.skip('LetsEncrypt SSL cert is not being used for this domain');
    }

// 1. parse ~/.acme.sh/account.conf to get the email
    const accountConf = fs.readFileSync(path.join(originalAcmePath, 'account.conf'), {encoding: 'utf8'});
    const parsed = accountConf.match(/ACCOUNT_EMAIL='(.*)'\n/);

if (!parsed) {
        throw new cli.errors.SystemError('Unable to parse letsencrypt account email');
    }

return this.ui.listr([{
        // 2. install acme.sh in /etc/letsencrypt if that hasn't been done already
        title: 'Installing acme.sh in new location',
        task: (ctx, task) => acme.install(this.ui, task)
    }, {
        // 3. run install cert for new acme.sh instance
        title: 'Regenerating SSL certificate in new location',
        task: () => acme.generate(this.ui, parsedUrl.hostname, rootPath, parsed[1], false)
    }, {
        // 4. Update cert locations in nginx-ssl.conf
        title: 'Updating nginx config',
        task: () => {
            const acmeFolder = path.join('/etc/letsencrypt', parsedUrl.hostname);

return replace({
                files: confFile,
                from: [
                    // Ensure here that we ONLY replace instances of the LetsEncrypt cert in the file,
                    // that way we don't overwrite the cert config of other certs.
                    certCheck,
                    new RegExp(`ssl_certificate_key ${originalCertFolder}/${parsedUrl.hostname}.key;`)
                ],
                to: [
                    `ssl_certificate ${path.join(acmeFolder, 'fullchain.cer')};`,
                    `ssl_certificate_key ${path.join(acmeFolder, `${parsedUrl.hostname}.key`)};`
                ]
            });
        }
    }, {
        title: 'Restarting Nginx',
        task: () => this.restartNginx()
    }, {
        // 5. run acme.sh --remove -d domain in old acme.sh directory to remove the old cert from renewal
        title: 'Disabling renewal for old certificate',
        task: () => acme.remove(parsedUrl.hostname, this.ui, originalAcmePath)
    }], false);
}

module.exports = {
    migrateSSL: migrateSSL
};

[+] ..
[-] migrations.js [edit]
[-] package.json [edit]
[-] acme.js [edit]
[+] templates
[-] index.js [edit]
[+] test