wildcard certificate renewal hook

acmedns/etc/letsencrypt/renewal-hooks/deploy/*

+#!/bin/bash
+
+string="$RENEWED_DOMAINS"
+if [[ $string == *"lawipac.com"* ]]; then
+	echo "lawipac.com is renewed"
+else
+        echo "skip lawipac.com deploy hook"
+	exit
+fi
+
+scp /etc/letsencrypt/live/lawipac.com/fullchain.pem  root@lawipac.com:/etc/letsencrypt/live/lawipac.com/fullchain.pem
+
+scp /etc/letsencrypt/live/lawipac.com/privkey.pem  root@lawipac.com:/etc/letsencrypt/live/lawipac.com/privkey.pem
+
+ssh root@lawipac.com "service apache2 reload"

jl-01/required-packages.txt

+wireguard
+	- assume soa private ip 10.0.0.4
+	- assume local private ip 10.0.0.1
+	- assume patrick-workstation 10.0.0.2
+	- assume patrick-mobile 10.0.0.3
+socat
+	- assume public IP: 175.22.14.240  
+	- assume soaprivate has 80/443 service bind to 10.0.0.4