Set up certbot to get a Let's Encrypt certificate for xmpp.5apps.com

site-cookbooks/5apps-xmpp_server/recipes/letsencrypt.rb

@@ -0,0 +1,41 @@
+# nginx config to generate a Let's Encrypt cert
+
+root_directory = "/var/www/xmpp.5apps.com"
+
+directory root_directory do
+  owner node["nginx"]["user"]
+  group node["nginx"]["group"]
+  action :create
+end
+
+template "#{node['nginx']['dir']}/sites-available/xmpp.5apps.com" do
+  source 'nginx_conf_xmpp.5apps.com.erb'
+  owner 'www-data'
+  mode 0640
+  variables server_name:    'xmpp.5apps.com',
+            root_directory: root_directory,
+            ssl_cert:       "/etc/letsencrypt/live/xmpp.5apps.com/fullchain.pem",
+            ssl_key:        "/etc/letsencrypt/live/xmpp.5apps.com/privkey.pem"
+  notifies :reload, 'service[nginx]', :delayed
+end
+
+execute "letsencrypt cert for xmpp.5apps.com" do
+  command "./certbot-auto certonly --webroot --agree-tos --email ops@5apps.com --webroot-path #{root_directory} -d xmpp.5apps.com -n"
+  cwd "/usr/local/certbot"
+  not_if { File.exist? "/etc/letsencrypt/live/xmpp.5apps.com/fullchain.pem" }
+  notifies :reload, "service[nginx]", :delayed
+  notifies :run, "execute[copy the tls cert to prosody folder]", :delayed
+end
+
+execute "copy the tls cert to prosody folder" do
+  action :nothing
+  command <<-EOF
+cp /etc/letsencrypt/live/xmpp.5apps.com/fullchain.pem /var/lib/prosody/xmpp.5apps.com.crt
+cp /etc/letsencrypt/live/xmpp.5apps.com/privkey.pem /var/lib/prosody/xmpp.5apps.com.key
+  EOF
+  notifies :restart, "service[prosody]", :delayed
+end
+
+nginx_site 'xmpp.5apps.com' do
+  enable true
+end