Only use certbot deploy hook when applicable

2023-12-01 10:00:07 +01:00 · 2023-12-01 10:00:07 +01:00 · 9d0ff358ef
parent 495a4231fb
commit 9d0ff358ef
1 changed files with 1 additions and 1 deletions
--- a/site-cookbooks/kosmos-base/resources/tls_cert_for.rb
+++ b/site-cookbooks/kosmos-base/resources/tls_cert_for.rb
@ -36,8 +36,8 @@ action :create do
        --agree-tos \
        --manual-auth-hook '#{hook_path} auth' \
        --manual-cleanup-hook '#{hook_path} cleanup' \
-        --deploy-hook /etc/letsencrypt/renewal-hooks/post/openresty \
        --email ops@kosmos.org \
+        #{node.run_list.roles.include?("openresty_proxy") ? '--deploy-hook /etc/letsencrypt/renewal-hooks/post/openresty' : nil } \
        #{domains.map {|d| "-d #{d}" }.join(" ")}
      CMD
      not_if do