acme.sh

deploy/docker: allow setting key file mode and owner in the container

The docker deploy hook copied the key file preserving the source mode
(root:root 0600), so a non-root container service (uid >= 1000) could not
read it. Add DEPLOY_DOCKER_CONTAINER_KEY_MODE and
DEPLOY_DOCKER_CONTAINER_KEY_OWNER, applied via chmod/chown inside the
container after the key is copied and before the reload command.

Closes #5333

neil

2026-07-05 16:30:46 +08:00

507baff2ef

deploy/haproxy: use printf instead of "echo -e" for the stats socket payload

dash's echo has no -e flag and sends a literal "-e " prefix to the
socket, so haproxy rejects the command and the hot update always fails
on Debian/Ubuntu (/bin/sh = dash). Also accept "Transaction updated",
which haproxy replies when an uncommitted transaction already exists.

fix https://github.com/acmesh-official/acme.sh/issues/6165

neil

2026-07-05 15:44:26 +08:00

1e2cd50fc9

fix(gcore_cdn): renew login api url (#5143 )

https://api.gcore.com/docs/iam#tag/Account

xiaopc

2026-07-04 20:14:32 +08:00

843a7efa7d

haproxy.sh: use two-argument -header form for LibreSSL (#3438 )

neil

2026-07-04 18:50:29 +08:00

bcbfe25d08

deploy/cpanel_uapi: strip YAML double quotes around wildcard domains in list_domains output

fix https://github.com/acmesh-official/acme.sh/issues/6115

neil

2026-07-04 18:46:59 +08:00

bbfb6f50ae

https://github.com/acmesh-official/acme.sh/issues/3201

neil

2026-07-04 16:55:49 +08:00

1a36823461

fix docker deploy hook on podman, check exec ExitCode instead of response body (#4977 )

neil

2026-07-04 10:49:32 +08:00

b4de9e8621

haproxy.sh: allows certificate deployment to multiple hosts (#5180 )

* haproxy.sh: allows certificate deployment to multiple hosts

* Update deploy/haproxy.sh

Co-authored-by: Matt Simerson <matt@tnpi.net>

* Update deploy/haproxy.sh

Co-authored-by: Matt Simerson <matt@tnpi.net>

---------

Co-authored-by: Matt Simerson <matt@tnpi.net>

Laurent GrawetandMatt Simerson

2026-07-04 00:35:02 +08:00

f4dc9fd9d1

Fix typo in synology_dsm.sh (#6406 )

Fix typo in an error message.

Artur Klauser

2026-07-04 00:32:45 +08:00

2229330c48

Adding custom Port definitions for truenas (#7033 )

* closing bracket and adding port for customer installations

* adding savedeployconfig

* fixing shfmt

* changeing

---------

Co-authored-by: neil <github@neilpang.com>

SirNomad49andneil

2026-07-01 20:55:55 +08:00

0925d5c522

Fix RouterOS deploy (#7034 )

* routeros: save ROUTER_OS_ADDITIONAL_SERVICES as base64

* routeros: remove cer_3

SpeedGriffon

2026-06-19 14:23:03 +02:00

db098055de

Add deployment plugin for Windows RDP via OpenSSH (#6925 )

* Add deployment plugin for Windows RDP via OpenSSH

Curd Becker

2026-05-02 10:56:13 +02:00

355b121c79

Merge pull request #6889 from achmadalifn4/dev

Add BytePlus ALB deployment script

neil

2026-04-24 21:46:10 +02:00

d00b2722ee

Fix byteplus_alb.sh

Achmad Alif Nasrulloh

2026-04-24 11:21:43 +07:00

e9b0cafac5

fix: commit overhaul (#6915 )

- Removed scope exclusion for "standard commit".
  - If 'device-and-networks' is excluded (previous behaviour), a certificate for Panorama (always outside of a template) will not be committed (imported to the config but never applied to Panorama). Therefore, panos.sh was only working for certificates used in templates and applied to devices, but not for the Panorama certificate itself.
  - According to the official documentation and the XML API Browser, there is no 'policy-and-objects' that can be excluded.
  - Although it is not mandatory that the user account is solely dedicated to replace certificates and to perform no other type of operations, it is recommended. If such recommendation is applied, the only changes being committed would be in relation to certificates. Therefore, it should be safe not to exclude any scopes.
- Changed the order for "force commit" from '<commit><partial><force>' (unofficial) to '<commit><force><partial>' (official). Both work, but it is recommended to use what is part of the official documentation and/or XML API Browser.
- Removed unofficial 'policy-and-objects' from commented out code (see above).
- Replaced 'exclude' with 'excluded' from commented out code, as per the official documentation. Both work, but see above.
- Replaced 'acmekeytest' with $_panos_user in the commented out code.

Official documentation: https://docs.paloaltonetworks.com/ngfw/api/pan-os-xml-api-request-types-and-actions/commit
XML API Browser: https://<PANOS HOST>/api

Antoni Company

2026-04-20 11:28:17 +02:00

9882d534af

Add new header variable _H5 in byteplus_alb.sh

Added a new header variable _H5 to the byteplus_alb.sh script.

ACHMAD ALIF NASRULLOH

2026-04-14 21:04:48 +08:00

f89a9a5de3

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

00090d24b8

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

73a682e561

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

a1b94db94d

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

5c94af86f3

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

3843495397

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

a739bf3e3a

Update bteplus_alb.sh

Achmad Alif Nasrulloh

2026-04-14 21:04:48 +08:00

75642a1252

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

668427f285

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

d0e123cb02

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

8587c3e744

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

934870fc77

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

8eea7ca307

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

28f1f07f49

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

ad71a785ec

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

d5c8060a65

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

4178c33524

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

044371b00a

Update deploy/byteplus_alb.sh

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

ACHMAD ALIF NASRULLOHandCopilot

2026-04-14 21:04:48 +08:00

86d98b0461

Add BytePlus ALB deployment script

This script deploys SSL/TLS certificates issued by acme.sh to BytePlus Application Load Balancer (ALB), supporting automatic renewal with zero-downtime certificate rotation.

ACHMAD ALIF NASRULLOH

2026-04-14 21:04:48 +08:00

6efd6d5b5a

Don't mark restart http as failed if json returns false because it was not restarted (#6906 )

Mitchell van Bijleveld

2026-04-14 20:37:50 +08:00

f3e61a8ef4

Update synology_dsm.sh (#6894 )

quote variable name so message isn't missing the variable that needs to be fixed.
this was reported in #2727  (feedback for hook)

Florian Heigl

2026-04-03 11:38:21 +08:00

ef49a9fd23

Merge pull request #6793 from ecm75/fix_kemplm

fixed checking for existing domain on loadmaster

neil

2026-02-23 19:37:06 +08:00

89c86efc56

Fixed missing error return value when certificate upload fails.

Eike-Christian Müller

2026-02-23 09:24:06 +01:00

8ca1c83b95

check Proxmox Backup Server API response for errors

infinitydev

2026-02-17 19:28:25 +01:00

bef0fdb1ae

check Proxmox VE API response for errors

infinitydev

2026-02-17 12:12:17 +00:00

020a4bb5b3

fixed checking for existing domain on loadmaster

emueller

2026-02-17 11:03:53 +01:00

acaaca89ab

Merge pull request #6436 from invario/localcopy-deploy-hook

Add 'localcopy' deploy-hook

neil

2026-02-14 11:01:40 +08:00

bdfa988b65

Merge pull request #6767 from dga-nagra/panos-api-key

Fix bug + Allow panos deploy-hook to use PANOS_KEY

neil

2026-02-07 22:15:28 +08:00

b79146281c

Merge pull request #6687 from kapouer/ssh-noscp-permissions

Ssh noscp permissions

neil

2026-02-04 18:49:52 +08:00

80e39eb63c

Conditionnaly change permissions (#1 )

dga-nagra

2026-02-04 11:01:44 +01:00

61e986f23c

Allowing panos deploy-hook to only depend on PANOS_KEY.

Previous version add bugs that were not properly using the _api_key.

It also enforced to provide PANOS_USER and PANOS_PASSWORD which can be very constraining.

PANOS_KEY now has precedence. If not provided, the script falls back to PANOS_USER and PANOS_PASSWORD.

David Gallay

2026-02-03 10:51:42 +01:00

6a60695549

feat(qiniu): make forceHttps configurable via environment variable

Add QINIU_FORCE_HTTPS environment variable (default: false) to allow
configuring HTTPS redirect behavior for CDN domains.

Your Name

2026-01-01 13:26:02 +00:00

2ad984d8ad

align logic to acme.sh installcert(), fix perms on non-key files

Signed-off-by: invario <67800603+invario@users.noreply.github.com>

invario

2025-12-30 11:41:50 -05:00

4219f7b2f6

fix: savedeployconf for DEPLOY_LOCALCOPY_CERTIFICATE

Co-authored-by: Kevin Hoser <45083826+hoser21@users.noreply.github.com>

invarioandKevin Hoser

2025-12-28 12:03:02 -05:00

e03f8d3ad6