diff --git a/site-cookbooks/kosmos-base/recipes/letsencrypt.rb b/site-cookbooks/kosmos-base/recipes/letsencrypt.rb index ae43c32..b5f0793 100644 --- a/site-cookbooks/kosmos-base/recipes/letsencrypt.rb +++ b/site-cookbooks/kosmos-base/recipes/letsencrypt.rb @@ -9,11 +9,25 @@ # Install certbot and set up hooks -apt_repository "certbot" do - uri "ppa:certbot/certbot" -end +# Remove the unless/else when we get rid of dev, running 15.04. No ppa for it +unless node["lsb"]["codename"] == "vivid" + apt_repository "certbot" do + uri "ppa:certbot/certbot" + end -package "certbot" + package "certbot" +else + remote_file "/usr/bin/certbot" do + source "https://dl.eff.org/certbot-auto" + mode 0755 + end + + cron "renew Let's Encrypt certificates" do + hour "4" + mailto "logs@5apps.com" + command "/usr/bin/certbot -q renew" + end +end directory "/etc/letsencrypt/renewal-hooks" do recursive true