Tweaks script to renew ssl cert

config/environment.sh

@@ -74,6 +74,10 @@ export BLOT_YOUTUBE_SECRET=
 export BLOT_AWS_KEY=
 export BLOT_AWS_SECRET=
 
+# AWS for controlling route 53 for wildcard SSL certficate
+export AWS_ACCESS_KEY_ID=
+export AWS_SECRET_ACCESS_KEY=
+
 # Mailgun for sending emails to customers
 export BLOT_MAILGUN_KEY=
 

scripts/production/renew-wildcard-ssl.sh

@@ -0,0 +1,18 @@
+#!/bin/sh
+set -e
+set -x
+
+ACME=/usr/local/bin/acme-nginx
+LOGFILE=/var/log/letsencrypt.log
+
+# Sources the environment variables required
+. /etc/blot/environment.sh
+
+# This is required to allow the cron script to work correctly
+alias nginx='/usr/local/openresty/bin/openresty'
+
+echo "[`date -u +%Y-%m-%dT%T.%3NZ`] Beginning attempt to renew wildcard certificate" >> $LOGFILE
+
+$ACME --dns-provider route53 -d "*.$BLOT_HOST" -d "$BLOT_HOST" >> $LOGFILE 2>&1
+
+echo "[`date -u +%Y-%m-%dT%T.%3NZ`] Finished attempt to renew wildcard certificate" >> $LOGFILE