fix: capture exit code instead of std-out

fix: Unset -e during nc command
fix(lego): do not trigger script abortion on wanted exit code != 0
2025-11-28 12:23:10 +01:00 · 2025-11-28 12:23:10 +01:00 · 2025-11-28 12:23:10 +01:00 · 2025-11-28 12:20:16 +01:00
1 changed files with 2 additions and 2 deletions
--- a/roles/lego/files/lego_run.sh
+++ b/roles/lego/files/lego_run.sh
@@ -18,7 +18,7 @@ if [[ -n "${LEGO_HTTP_FALLBACK_PORT:-}" ]]; then
 fi

 if [[ -n "${LEGO_PRE_RENEWAL_HOOK:-}" ]]; then
-  $LEGO_PRE_RENEWAL_HOOK
+  /usr/bin/env bash -c "$LEGO_PRE_RENEWAL_HOOK"
 fi

 LEGO_COMMAND_ARGS_EXPANDED=$(bash -c "echo $LEGO_COMMAND_ARGS") # This is a bit icky
@@ -34,5 +34,5 @@ find "$LEGO_CERT_STORE_PATH/certificates" -type f | xargs -I{} -n 1 chmod "$LEGO
 find "$LEGO_CERT_STORE_PATH/certificates" -type f | xargs -I{} -n 1 chown "${LEGO_CERT_USER}:${LEGO_CERT_GROUP}" "{}"

 if [[ -n "${LEGO_POST_RENEWAL_HOOK:-}" ]]; then
-  $LEGO_POST_RENEWAL_HOOK
+  /usr/bin/env bash -c "$LEGO_POST_RENEWAL_HOOK"
 fi
Author	SHA1	Message	Date
Jadyn Emma Jäger	4c2b6ccc6d	fix: capture exit code instead of std-out	2025-11-28 12:23:10 +01:00
Jadyn Emma Jäger	2681032d96	fix: Unset -e during nc command	2025-11-28 12:23:10 +01:00
transcaffeine	66877d3258	fix(lego): do not trigger script abortion on wanted exit code != 0	2025-11-28 12:23:10 +01:00
Jadyn Emma Jäger	3c8fc29746	feat(roles/lego): Run hooks with bash -c ref #13	2025-11-28 12:20:16 +01:00