[Synology] SSL (Wildcard)와일드카드 인증서 받기 (DSM 7.0)

./acme.sh --install --nocron --home /usr/local/share/acme.sh --accountemail "이메일 입력" --server letsencrypt

cd /usr/local/share/acme.sh

chmod a+x acme.sh

export CF_Key="cloudflare 글로벌 API Key 입력"
export CF_Email="cloudflare 로그인 이메일 입력"
export CERT_DNS="dns_cf"

./acme.sh --issue -d 도메인입력 -d *.도메인입력 --dns "$CERT_DNS" --cert-file /usr/syno/etc/certificate/system/default/cert.pem --key-file /usr/syno/etc/certificate/system/default/privkey.pem --fullchain-file /usr/syno/etc/certificate/system/default/fullchain.pem --reloadcmd "/usr/syno/bin/synosystemctl reload nginx" --dnssleep 20 --force

# Note: The $CERT_FOLDER must be hardcoded here since the running environment is unknown. Don't blindly copy&paste!
# if you used the normal method the certificate will be installed in the system/default directory CERTDIR="system/default"
# if you used the alternative method it is copied to an unknown path, change the following example to the output of the creation process and uncomment.
CERTDIR="system/default"

# do not change anything beyond this line!
CERTROOTDIR="/usr/syno/etc/certificate"
PACKAGECERTROOTDIR="/usr/local/etc/certificate"
FULLCERTDIR="$CERTROOTDIR/$CERTDIR"

# renew certificates, this used to be explained as a custom cronjob but works just as well within this script according to the output of the task.
/usr/local/share/acme.sh/acme.sh --cron --home /usr/local/share/acme.sh/

# copy, 갱신 이후에 다시 점검 해서 아래 내용 필요 없으면 삭제할 예정
# cp /usr/local/share/acme.sh/[도메인주소폴더]/도메인주소명.cer /usr/syno/etc/certificate/_archive/[인증서폴더]/cert.pem
# cp /usr/local/share/acme.sh/[도메인주소폴더]/ca.cer /usr/syno/etc/certificate/_archive/[인증서폴더]/chain.pem
# cp /usr/local/share/acme.sh/[도메인주소폴더]/fullchain.cer /usr/syno/etc/certificate/_archive/[인증서폴더]/fullchain.pem
# cp /usr/local/share/acme.sh/[도메인주소폴더]/도메인주소명.key /usr/syno/etc/certificate/_archive/[인증서폴더]/privkey.pem

# copy default, 갱신 이후에 다시 점검 해서 아래 내용 필요 없으면 삭제할 예정
# cp /usr/local/share/acme.sh/[도메인주소폴더]/도메인주소명.cer /usr/syno/etc/certificate/system/default/cert.pem
# cp /usr/local/share/acme.sh/[도메인주소폴더]/ca.cer /usr/syno/etc/certificate/system/default/chain.pem
# cp /usr/local/share/acme.sh/[도메인주소폴더]/fullchain.cer /usr/syno/etc/certificate/system/default/fullchain.pem
# cp /usr/local/share/acme.sh/[도메인주소폴더]/도메인주소명.key /usr/syno/etc/certificate/system/default/privkey.pem

# find all subdirectories containing cert.pem files
PEMFILES=$(find $CERTROOTDIR -name cert.pem)
if [ ! -z "$PEMFILES" ]; then
	  for DIR in $PEMFILES; do
			  # replace the certificates, but never the ones in the _archive folders as those are all the unique
			  # certificates on the system.
			  if [[ $DIR != *"/_archive/"* ]]; then
					  rsync -avh "$FULLCERTDIR/" "$(dirname $DIR)/"
			  fi
	  done
fi

# reload
/usr/syno/bin/synosystemctl reload nginx

# update and restart all installed packages
PEMFILES=$(find $PACKAGECERTROOTDIR -name cert.pem)
if [ ! -z "$PEMFILES" ]; then
	  for DIR in $PEMFILES; do
			  #active directory has it's own certificate so we do not update that package
			  if [[ $DIR != *"/ActiveDirectoryServer/"* ]]; then
					  rsync -avh "$FULLCERTDIR/" "$(dirname $DIR)/"
					  /usr/syno/bin/synopkg restart $(echo $DIR | awk -F/ '{print $6}')
			  fi
	  done
fi

cd /usr/local/share/acme.sh
export SYNO_Username='관리자아이디' 
export SYNO_Password='관리자패스워드' 
export SYNO_Scheme="https" #DSM 사용할 프로토콜
export SYNO_Port="5001" #DSM 포트, 기본은 http인경우 5000, https인경우 5001이 됩니다. 본인에 맞게 수정
export SYNO_Certificate="" 
export SYNO_Create=1
./acme.sh --insecure --deploy --home . -d 도메인주소 -d *.도메인주소 --deploy-hook synology_dsm

 cat /usr/syno/etc/certificate/_archive/DEFAULT

/usr/syno/sbin/synoservicectl --reload nginx 

/usr/syno/bin/synosystemctl reload nginx