docker run --rm -it -v "$(pwd)/out":/acme.sh \
  -e Ali_Key=your_access_key_id \
  -e Ali_Secret=your_access_key_secret \ 
  neilpang/acme.sh --issue --dns dns_ali --server letsencrypt \
  -d *.eoekun.top --dnssleep 300

#!/bin/bash
#!/bin/bash

# 配置参数
WORKDIR='/docker/acme.sh/out/'
INSTALL_DIR='/docker/nginx/etc/cert_file'

mkdir -p $WORKDIR && mkdir -p $INSTALL_DIR

# 证书文件路径
KEY_FILE="$INSTALL_DIR/privkey.pem"
FULLCHAIN_FILE="$INSTALL_DIR/fullchain.pem"

DNS_TYPE='ali'
ACCESS_KEY_ID='your_access_key_id'
ACCESS_KEY_SECRET='your_access_key_secret'

# 根域名
DOMAIN_NAME='eoekun.top'
# 泛域名
WILDCARD_DOMAIN="*.$DOMAIN_NAME"

# Reload 命令
RELOAD_CMD='echo "Do nothing in docker"'

# 函数定义

# 新增证书
issue_certificate() {
    docker run --rm -it -v "$WORKDIR":/acme.sh \
        -e Ali_Key="$ACCESS_KEY_ID" \
        -e Ali_Secret="$ACCESS_KEY_SECRET" \
        neilpang/acme.sh --issue --dns dns_"$DNS_TYPE" --server letsencrypt \
        --dnssleep 60 -d "$DOMAIN_NAME" -d "$WILDCARD_DOMAIN" "$@"
}

# 续期证书
renew_certificate() {
    docker run --rm -it -v "$WORKDIR":/acme.sh \
        -e Ali_Key="$ACCESS_KEY_ID" \
        -e Ali_Secret="$ACCESS_KEY_SECRET" \
        neilpang/acme.sh --renew -d "$DOMAIN_NAME" -d "$WILDCARD_DOMAIN" "$@"
}

# 安装证书
install_certificate() {
    # 泛域名证书
    docker run --rm -it -v "$WORKDIR":/acme.sh -v "$INSTALL_DIR:$INSTALL_DIR" \
        neilpang/acme.sh --install-cert -d "$DOMAIN_NAME" -d "$WILDCARD_DOMAIN" \
        --key-file "$KEY_FILE" \
        --fullchain-file "$FULLCHAIN_FILE" \
        --reloadcmd "$RELOAD_CMD" "$@"
}

# 检查输入参数并执行相应功能
execute_command() {
    local command="$1"
    shift  # 移除第一个参数，使得 $@ 包含额外参数

    case "$command" in
        # 续期、证书替换、重启服务
        auto)
            renew_certificate
            if [ $? -ne 0 ]; then
                echo "Skip install"
                return 2
            fi
            install_certificate
            # 重启 nginx 的 Docker 容器
            echo "Restarting nginx..."
            echo "======================================="
            docker restart nginx
            echo "Done."
            ;;
        issue)
            issue_certificate "$@"
            ;;
        renew)
            renew_certificate "$@"
            ;;
        install)
            install_certificate "$@"
            # 重启 nginx 的 Docker 容器
            echo "Restarting nginx..."
            echo "======================================="
            docker restart nginx
            echo "Done."
            ;;
        *)
            echo "Usage: $0 {issue|renew|install} [additional acme.sh options]"
            exit 1
            ;;
    esac
}

# 执行命令
execute_command "$@"