4

.env

@@ -1 +1 @@
-VERSION='3.7.6'
+VERSION='3.7.8'

.gitea/workflows/release.yml

@@ -45,7 +45,7 @@ jobs:
       - name: Traefik [Download]
         if: steps.cache-traefik.outputs.cache-hit != 'true'
         run: |
-          /usr/bin/wget --verbose --output-document='./sources.tar.gz' 'https://github.com/traefik/traefik/releases/download/v${{ steps.environment.outputs.version }}/traefik_v${{ steps.environment.outputs.version }}_linux_${{ matrix.architecture }}.tar.gz'
+          /usr/bin/curl --verbose --location --output './sources.tar.gz' 'https://github.com/traefik/traefik/releases/download/v${{ steps.environment.outputs.version }}/traefik_v${{ steps.environment.outputs.version }}_linux_${{ matrix.architecture }}.tar.gz'
       - name: Traefik [Extract]
         if: steps.cache-traefik.outputs.cache-hit != 'true'
         run: |

traefik/etc/traefik/acme/00-export

@@ -60,13 +60,14 @@ fi
 
 if [[ -d "${ACME_STORAGE}" ]]; then
   /usr/bin/rm --force --recursive "${ACME_STORAGE}"
-fi
-
+else
   /usr/bin/install --directory --group='ssl-cert' --mode='2750' --owner='root' "${ACME_STORAGE}"
+fi
 
 for RESOLVER in $(/usr/bin/jq --raw-output --exit-status 'keys[]' "${ACME_DATABASE}"); do
 
   ACCOUNT=$(/usr/bin/jq --raw-output --arg resolver "${RESOLVER}" --exit-status '.[$resolver].Account.PrivateKey' "${ACME_DATABASE}")
+  /usr/bin/install --directory --group='root' --mode='0700' --owner='root' "${ACME_STORAGE}/.acme"
   /usr/bin/install --directory --group='root' --mode='0700' --owner='root' "${ACME_STORAGE}/.acme/${RESOLVER}"
   /usr/bin/echo -e "-----BEGIN RSA PRIVATE KEY-----\n${ACCOUNT}\n-----END RSA PRIVATE KEY-----" | \
     /usr/bin/openssl 'rsa' -inform 'pem' -out "${ACME_STORAGE}/.acme/${RESOLVER}/account.key" &> '/dev/null'