#!/bin/bash
cd /opt/medical_records
python3 -m acme_tiny --account-key /etc/letsencrypt/account.key --csr /etc/letsencrypt/csr.pem --acme-dir /opt/medical_records/.well-known/acme-challenge/ > /etc/letsencrypt/signed.crt 2>/tmp/acme_renew.log
if [ $? -eq 0 ] && [ -s /etc/letsencrypt/signed.crt ]; then
    cp /etc/letsencrypt/signed.crt /etc/letsencrypt/live/medical.dindontaichi.cn/cert.pem
    cat /etc/letsencrypt/signed.crt /etc/letsencrypt/intermediate.pem > /etc/letsencrypt/live/medical.dindontaichi.cn/fullchain.pem
    cp /etc/letsencrypt/domain.key /etc/letsencrypt/live/medical.dindontaichi.cn/privkey.pem
    nginx -s reload
    echo "续期成功: $(date)" >> /tmp/acme_renew.log
else
    echo "续期失败: $(date)" >> /tmp/acme_renew.log
fi