From 0e056afbf78d7ced01b7ffe051def2a4c99f00f0 Mon Sep 17 00:00:00 2001
From: Matthew Pomes <matthew.pomes@pm.me>
Date: Tue, 2 Sep 2025 23:57:28 -0500
Subject: [PATCH] Add workflow to setup/renew certificates

---
 .gitea/workflows/certificates.yaml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 .gitea/workflows/certificates.yaml

diff --git a/.gitea/workflows/certificates.yaml b/.gitea/workflows/certificates.yaml
new file mode 100644
index 0000000..21074f0
--- /dev/null
+++ b/.gitea/workflows/certificates.yaml
@@ -0,0 +1,26 @@
+name: Build certificates
+
+on:
+  workflow_dispatch:
+    # Note: this doesn't work on current gitea for some reason?
+    build_certs:
+      description: Build certificates from scratch
+      type: boolean
+      required: true
+      default: false
+env:
+  TZ: America/Chicago
+jobs:
+  deploy:
+    name: Setup/Renew certificates
+    runs-on: homelab
+    steps:
+      - name: "Build certificates"
+        if: inputs.build_certs
+        run: |
+          cd /home/matthew/homelab
+          bash ./build-certs.sh
+      - name: "Renew certificates"
+        run: |
+          cd /home/matthew/homelab
+          docker compose run --rm certbot renew