Renew Let's Encrypt certificates and put them in HAProxy ssl folder

le-renew.sh

#!/bin/bash
# Let's encrypt: renew certificates and put them in haproxy ssl folder for reloading.
# Maxime Saddok <[email protected]>
# put in /etc/cron.weekly/le-renew && chmod +x /etc/cron.weekly/le-renew

set -x
set -e

/opt/letsencrypt/letsencrypt-auto --standalone --standalone-supported-challenges http-01 --http-01-port 9999 renew;

LE_OUTPUT=/etc/letsencrypt/live;

for i in ls /etc/letsencrypt/live/*; do 
  domain=`basename $i`; 
  cat $LE_OUTPUT/$domain/{fullchain.pem,privkey.pem} > /etc/haproxy/ssl/${domain}.pem;
done

systemctl reload haproxy;