Docker Secrets & Letsencrypt automation

create_secrets.sh

#!/usr/bin/env bash

LE_ARC_DIR="etc/archive"

SECRETS=$(docker secret ls | tail -n +2 | awk '{print $2}')

find $LE_ARC_DIR -name 'fullchain*.pem' -o -name 'privkey*.pem' | sed "s,$LE_ARC_DIR/,," | while read file
do
    base_file=$(basename $file .pem | sed -r 's/[0-9]+$//')
    version=$(basename $file .pem | sed -r 's/^.*?([0-9]+)$/\1/')
    secret_name="le_$(dirname $file)_$base_file.$version"
    if ! echo $SECRETS | grep -q $secret_name
    then
        echo "Creating secret $secret_name for $file"
        docker secret create --label letsencrypt $secret_name $LE_ARC_DIR/$file
    else
        echo "Secret $secret_name already exists"
    fi
done