From 76994eabf8dace944b8dee0165dbc4d0a86e8e76 Mon Sep 17 00:00:00 2001
From: Cantibra <cantibra@privlab.it>
Date: Sat, 18 Jul 2026 15:35:12 +0200
Subject: [PATCH] 4

---
 .env                               | 2 +-
 .gitea/workflows/release.yml       | 2 +-
 traefik/etc/traefik/acme/00-export | 5 +++--
 3 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/.env b/.env
index 6d37258..76f7f3f 100644
--- a/.env
+++ b/.env
@@ -1 +1 @@
-VERSION='3.7.6'
+VERSION='3.7.8'
diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index 6a3966f..0d2679d 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -45,7 +45,7 @@ jobs:
       - name: Traefik [Download]
         if: steps.cache-traefik.outputs.cache-hit != 'true'
         run: |
-          /usr/bin/wget --verbose --output-document='./sources.tar.gz' 'https://github.com/traefik/traefik/releases/download/v${{ steps.environment.outputs.version }}/traefik_v${{ steps.environment.outputs.version }}_linux_${{ matrix.architecture }}.tar.gz'
+          /usr/bin/curl --verbose --location --output './sources.tar.gz' 'https://github.com/traefik/traefik/releases/download/v${{ steps.environment.outputs.version }}/traefik_v${{ steps.environment.outputs.version }}_linux_${{ matrix.architecture }}.tar.gz'
       - name: Traefik [Extract]
         if: steps.cache-traefik.outputs.cache-hit != 'true'
         run: |
diff --git a/traefik/etc/traefik/acme/00-export b/traefik/etc/traefik/acme/00-export
index d7ab7ea..4a71a17 100644
--- a/traefik/etc/traefik/acme/00-export
+++ b/traefik/etc/traefik/acme/00-export
@@ -60,13 +60,14 @@ fi
 
 if [[ -d "${ACME_STORAGE}" ]]; then
   /usr/bin/rm --force --recursive "${ACME_STORAGE}"
+else
+  /usr/bin/install --directory --group='ssl-cert' --mode='2750' --owner='root' "${ACME_STORAGE}"
 fi
 
-/usr/bin/install --directory --group='ssl-cert' --mode='2750' --owner='root' "${ACME_STORAGE}"
-
 for RESOLVER in $(/usr/bin/jq --raw-output --exit-status 'keys[]' "${ACME_DATABASE}"); do
 
   ACCOUNT=$(/usr/bin/jq --raw-output --arg resolver "${RESOLVER}" --exit-status '.[$resolver].Account.PrivateKey' "${ACME_DATABASE}")
+  /usr/bin/install --directory --group='root' --mode='0700' --owner='root' "${ACME_STORAGE}/.acme"
   /usr/bin/install --directory --group='root' --mode='0700' --owner='root' "${ACME_STORAGE}/.acme/${RESOLVER}"
   /usr/bin/echo -e "-----BEGIN RSA PRIVATE KEY-----\n${ACCOUNT}\n-----END RSA PRIVATE KEY-----" | \
     /usr/bin/openssl 'rsa' -inform 'pem' -out "${ACME_STORAGE}/.acme/${RESOLVER}/account.key" &> '/dev/null'