snapshot of https://github.com/zulip/zulip.git @ 48c69911c7dd4e03b20552eb3bd77ad8151c1357 (2026-09-15)

puppet/zulip/files/letsencrypt/020-symlink.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+set -euo pipefail
+symlink_with_backup() {
+    if [ -e "$2" ]; then
+        # If the user is setting up our automatic certbot-management on a
+        # system that already has certs for Zulip, use some extra caution
+        # to keep the old certs available.
+        mv -f --backup=numbered "$2" "$2".setup-certbot || true
+    fi
+    ln -nsf "$1" "$2"
+}
+
+if [ -n "${ZULIP_DOMAIN:-}" ]; then
+    CERT_DIR="/etc/letsencrypt/live/$ZULIP_DOMAIN"
+    symlink_with_backup "$CERT_DIR/privkey.pem" /etc/ssl/private/zulip.key
+    symlink_with_backup "$CERT_DIR/fullchain.pem" /etc/ssl/certs/zulip.combined-chain.crt
+fi

puppet/zulip/files/letsencrypt/050-nginx.sh

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+set -euo pipefail
+service nginx reload

puppet/zulip/files/letsencrypt/055-email-server.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+supervisorctl restart zulip-email-server