# Using deploy api Before you can deploy your cert, you must [issue the cert first](https://github.com/Neilpang/acme.sh/wiki/How-to-issue-a-cert). Here are the scripts to deploy the certs/key to the server/services. ## 1. Deploy the certs to your cpanel host. (cpanel deploy hook is not finished yet, this is just an example.) Then you can deploy now: ```sh export DEPLOY_CPANEL_USER=myusername export DEPLOY_CPANEL_PASSWORD=PASSWORD acme.sh --deploy -d example.com --deploy-hook cpanel ``` ## 2. Deploy ssl cert on kong proxy engine based on api. Before you can deploy your cert, you must [issue the cert first](https://github.com/Neilpang/acme.sh/wiki/How-to-issue-a-cert). (TODO) ## 3. Deploy the cert to remote server through SSH access. (TODO) ## 4. Deploy the cert to local vsftpd server. ```sh acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd ``` The default vsftpd conf file is `/etc/vsftpd.conf`, if your vsftpd conf is not in the default location, you can specify one: ```sh export DEPLOY_VSFTPD_CONF="/etc/vsftpd.conf" acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd ``` The default command to restart vsftpd server is `service vsftpd restart`, if it doesn't work, you can specify one: ```sh export DEPLOY_VSFTPD_RELOAD="/etc/init.d/vsftpd restart" acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd ``` ## 5. Deploy the cert to local exim4 server. ```sh acme.sh --deploy -d ftp.example.com --deploy-hook exim4 ``` The default exim4 conf file is `/etc/exim/exim.conf`, if your exim4 conf is not in the default location, you can specify one: ```sh export DEPLOY_EXIM4_CONF="/etc/exim4/exim4.conf.template" acme.sh --deploy -d ftp.example.com --deploy-hook exim4 ``` The default command to restart exim4 server is `service exim4 restart`, if it doesn't work, you can specify one: ```sh export DEPLOY_EXIM4_RELOAD="/etc/init.d/exim4 restart" acme.sh --deploy -d ftp.example.com --deploy-hook exim4 ``` ## 6. Deploy the cert to OSX Keychain ```sh acme.sh --deploy -d ftp.example.com --deploy-hook keychain ``` ## 7. Deploy the cert to local weechat IRC client through fifo plugin Before you can deploy your cert, you must [issue the cert first](https://github.com/Neilpang/acme.sh/wiki/How-to-issue-a-cert). Then you can deploy now: ```sh export DEPLOY_WEECHAT_PEM=~/.weechat/ssl/relay.pem export DEPLOY_WEECHAT_HOME=~/.weechat acme.sh --deploy -d weechat.example.com --deploy --deploy-hook weechat Notes: * Run acme.sh under the same user as the weechat client * Weechat must be configured with ```plugins.var.fifo.fifo = on``` ``` On deploy, the weechat deploy hook copies the the relevant data to $DEPLOY_WEECHAT_PEM. Additionally, this hook attempts to issue a ```/relay sslcertkey``` command via the FIFO plugin. The FIFO files are searched for within $DEPLOY_WEECHAT_HOME. Both environment variables default to weechat's defaults listed above. If successful, this installs and reloads the new relay SSL certificate in the client requiring no user interaction whatsoever.