Renew certificate using certbot for MongoDB

renew-mongo-cert.sh

#!/bin/bash

# Define variables
DOMAIN=foo.example.com

# renew cert
certbot renew

# combine latest letsencrypt files for mongo

# find latest fullchain*.pem
newestFull=$(ls -v /etc/letsencrypt/archive/"$DOMAIN"/fullchain*.pem | tail -n 1)
echo "$newestFull"

# find latest privkey*.pem
newestPriv=$(ls -v /etc/letsencrypt/archive/"$DOMAIN"/privkey*.pem | tail -n 1)
echo "$newestPriv"

# combine to mongo.pem
cat {$newestFull,$newestPriv} | tee /etc/ssl/mongo.pem

# set rights for mongo.pem
chmod 600 /etc/ssl/mongo.pem
chown mongodb:mongodb /etc/ssl/mongo.pem

# restart mongo
service mongod restart

Thank you very much for the script and for the article!

If I may suggest a little improvement, you could use /etc/letsencrypt/live/"$DOMAIN"/fullchain.pem, and /etc/letsencrypt/live/"$DOMAIN"/privkey.pem instead of extracting the latest files from archive.