ohowl

TODO:

• Consul/Vault storage
• cert revocation

Oh, Owl!

Hetzner Cloud utils

Usage

Get metadata

owl hcloud metadata # => {"id":"12345","hostname":"name","ip":"10.0.1.11","public_ip":"X.Y.Z.W"}

Wait for private IP to be assigned (30x every 10s)

owl hcloud wait

Template rendering (generic)

owl tpl render /tmp/consul.json \
    ip=$(owl hcloud metadata | jq -r .ip) \
    node_name=$(owl hcloud metadata | jq -r .hostname) \
    > /opt/consul/config/default.json

TLS

Issues, renews and lists certificates using Let's Encrypt (based on lego library ⭐). Uses pluggable storage system.

Issue/Renew certificate (when testing use debug=true)

owl hcloud tls issue
    token=$HCLOUD_DNS_TOKEN
    email=you@example.com
    domains=*.ohowl.dev,ohowl.dev
    cert-path=/tmp
    cert-storage=fs|consul|vault
    account-path=/tmp
    account-storage=fs|consul|vault
    debug=true

owl hcloud tls renew
   ... # same params

List certificates

owl hcloud tls list cert-path=/tmp cert-storage=fs|consul|vault