From 0b9132eb7719130831cb4246b558be116bfa7467 Mon Sep 17 00:00:00 2001
From: Benoit S <git@benpro.fr>
Date: Thu, 8 Apr 2021 18:56:33 +0900
Subject: [PATCH] Handle DNS renewal

---
 deploy.py              | 14 ++++++++++++++
 files/start-adguard.sh |  6 ++++++
 files/stop-adguard.sh  |  4 ++++
 3 files changed, 24 insertions(+)
 create mode 100644 files/start-adguard.sh
 create mode 100644 files/stop-adguard.sh

diff --git a/deploy.py b/deploy.py
index cbe3a03..82fff4a 100644
--- a/deploy.py
+++ b/deploy.py
@@ -148,3 +148,17 @@ systemd.service(
     enabled=True,
 )
 
+files.put(
+    name='Set LE pre renewal-hook',
+    src='files/stop-adguard.sh',
+    dest='/etc/letsencrypt/renewal-hooks/pre/stop-adguard.sh',
+    mode='755',
+)
+
+files.put(
+    name='Set LE post renewal-hook',
+    src='files/start-adguard.sh',
+    dest='/etc/letsencrypt/renewal-hooks/post/start-adguard.sh',
+    mode='755',
+)
+
diff --git a/files/start-adguard.sh b/files/start-adguard.sh
new file mode 100644
index 0000000..07f2713
--- /dev/null
+++ b/files/start-adguard.sh
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+install -o adguard -g adguard -m 600 /etc/letsencrypt/live/dns.benpro.fr/privkey.pem /home/adguard/
+install -o adguard -g adguard -m 600 /etc/letsencrypt/live/dns.benpro.fr/fullchain.pem /home/adguard/
+systemctl start AdGuardHome.service
diff --git a/files/stop-adguard.sh b/files/stop-adguard.sh
new file mode 100644
index 0000000..862f400
--- /dev/null
+++ b/files/stop-adguard.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+systemctl stop AdGuardHome.service