Mass update a cert

[clstr]

Is your feature request related to a problem? Please describe.
I use custom wildcard certs from LE that are generated outside of NPM's container.
Every time I need to renew I have to import the new cert and update all my proxied hosts - which can be time consuming.

Describe the solution you'd like
Some way to apply/replace the cert to a list of hosts. Maybe some action that lets you select multi hosts at once and mass update options. might even be useful for other functions. In the cert's three dot menu, a "Apply Cert To" button that will bring out another menu to select all the hosts you wish to apply it to.

Describe alternatives you've considered
prob shutting down the container and writing a script to update the cert in the nginx config, but a native ability would be better.

[EidoDK]

You don't need to replace the custom certificates. They DO get updated if you just replace the files in the custom_cert directory.

What doesn't get updated, is the expiration dates..

Remedy that with something like this (This script runs on
my Synology NAS every friday and updates expiration date on 4 certificates)

Edit it to reflect your own setup:

#!/bin/sh
set -e

DB="/volume1/docker/nginx/data/database.sqlite"
SSL_BASE="/volume1/docker/nginx/data/custom_ssl"

update_expiry() {
    ID="$1"
    CERT="$SSL_BASE/npm-$ID/fullchain.pem"

    [ -f "$CERT" ] || {
        echo "Missing certificate file: $CERT"
        exit 1
    }

    EXP_SQL="$(openssl x509 -in "$CERT" -noout -enddate \
        | cut -d= -f2 \
        | python3 -c 'import sys, datetime
s = sys.stdin.read().strip()
dt = datetime.datetime.strptime(s, "%b %d %H:%M:%S %Y %Z")
print(dt.strftime("%Y-%m-%d %H:%M:%S"))')"

    echo "Updating NPM certificate id $ID -> $EXP_SQL"

    sqlite3 "$DB" \
        "update certificate set expires_on='$EXP_SQL', modified_on=datetime('now') where id=$ID;"
}

[ -f "$DB" ] || {
    echo "Missing NPM database: $DB"
    exit 1
}

BACKUP="$DB.bak.$(date +%Y%m%d-%H%M%S)"
cp "$DB" "$BACKUP"
echo "Database backup created: $BACKUP"

update_expiry 6
update_expiry 7
update_expiry 8
update_expiry 9

echo "NPM certificate expiration dates updated"

sqlite3 "$DB" \
"select id,nice_name,domain_names,expires_on,provider from certificate where id in (6,7,8,9);"

[AdrianB-UK]

Describe the solution you'd like Some way to apply/replace the cert to a list of hosts. Maybe some action that lets you select multi hosts at once and mass update options. might even be useful for other functions. In the cert's three dot menu, a "Apply Cert To" button that will bring out another menu to select all the hosts you wish to apply it to.

I already put a request in for this feature here: #5482

[EidoDK]

Yes, but that does not create automation. Scripting from the outside will.