kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 28 Pull Requests 3 Projects 2 Activity

Don't use Let's Encrypt in development environment

Browse Source
This commit is contained in:
Greg Karékinian 2017-03-31 19:21:48 +02:00
parent 3158cf9550
commit 555195c32f
1 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
site-cookbooks/sockethub/recipes/proxy.rb
View File

@ -7,8 +7,6 @@
# All rights reserved - Do Not Redistribute # All rights reserved - Do Not Redistribute
# #
include_recipe "kosmos-base::letsencrypt"
firewall_rule 'sockethub' do firewall_rule 'sockethub' do
port node['sockethub']['external_port'].to_i port node['sockethub']['external_port'].to_i
protocol :tcp protocol :tcp
@ -37,11 +35,15 @@ template "#{node['nginx']['dir']}/sites-available/sockethub" do
notifies :reload, 'service[nginx]', :delayed notifies :reload, 'service[nginx]', :delayed
end end
execute "letsencrypt cert for sockethub.kosmos.org" do unless node.chef_environment == "development"
include_recipe "kosmos-base::letsencrypt"
execute "letsencrypt cert for sockethub.kosmos.org" do
command "./certbot-auto certonly --webroot --agree-tos --email ops@5apps.com --webroot-path /var/www/sockethub -d sockethub.kosmos.org -n" command "./certbot-auto certonly --webroot --agree-tos --email ops@5apps.com --webroot-path /var/www/sockethub -d sockethub.kosmos.org -n"
cwd "/usr/local/certbot" cwd "/usr/local/certbot"
not_if { File.exist? "/etc/letsencrypt/live/sockethub.kosmos.org/fullchain.pem" } not_if { File.exist? "/etc/letsencrypt/live/sockethub.kosmos.org/fullchain.pem" }
notifies :reload, "service[nginx]", :delayed notifies :reload, "service[nginx]", :delayed
end
end end
nginx_site 'sockethub' do nginx_site 'sockethub' do