From 5fa0fa661b97cf04ee22d532e9b64e96226f606c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Greg=20Kar=C3=A9kinian?= Date: Mon, 18 Mar 2019 16:52:05 +0100 Subject: [PATCH] Install certbot from the direct download when on 15.04 It does not have a ppa release. Add a cron job for renewal. When using the PPA a Systemd timer is part of the package --- .../kosmos-base/recipes/letsencrypt.rb | 22 +++++++++++++++---- 1 file changed, 18 insertions(+), 4 deletions(-) diff --git a/site-cookbooks/kosmos-base/recipes/letsencrypt.rb b/site-cookbooks/kosmos-base/recipes/letsencrypt.rb index ae43c32..b5f0793 100644 --- a/site-cookbooks/kosmos-base/recipes/letsencrypt.rb +++ b/site-cookbooks/kosmos-base/recipes/letsencrypt.rb @@ -9,11 +9,25 @@ # Install certbot and set up hooks -apt_repository "certbot" do - uri "ppa:certbot/certbot" -end +# Remove the unless/else when we get rid of dev, running 15.04. No ppa for it +unless node["lsb"]["codename"] == "vivid" + apt_repository "certbot" do + uri "ppa:certbot/certbot" + end -package "certbot" + package "certbot" +else + remote_file "/usr/bin/certbot" do + source "https://dl.eff.org/certbot-auto" + mode 0755 + end + + cron "renew Let's Encrypt certificates" do + hour "4" + mailto "logs@5apps.com" + command "/usr/bin/certbot -q renew" + end +end directory "/etc/letsencrypt/renewal-hooks" do recursive true