⚠ Since Hetzner Cloud supports some features out of the box, this project no longer make sense - unmaintained
TODO:
- Consul/Vault storage
- cert revocation
Hetzner Cloud utils
Get metadata
owl hcloud metadata # => {"id":"12345","hostname":"name","ip":"10.0.1.11","public_ip":"X.Y.Z.W"}
Wait for private IP to be assigned (30x every 10s)
owl hcloud wait
owl tpl render /tmp/consul.json \
ip=$(owl hcloud metadata | jq -r .ip) \
node_name=$(owl hcloud metadata | jq -r .hostname) \
> /opt/consul/config/default.json
Issues, renews and lists certificates using Let's Encrypt (based on lego library ⭐). Uses pluggable storage system.
Issue/Renew certificate (when testing use debug=true)
owl hcloud tls issue
token=$HCLOUD_DNS_TOKEN
[email protected]
domains=*.ohowl.dev,ohowl.dev
cert-path=/tmp
cert-storage=fs|consul|vault
account-path=/tmp
account-storage=fs|consul|vault
debug=true
owl hcloud tls renew
... # same params
List certificates
owl hcloud tls list cert-path=/tmp cert-storage=fs|consul|vault