Move the nginx hook to the deploy directory, create renewal-hooks dir

2019-03-14 20:21:34 +01:00 · 2019-03-14 20:21:34 +01:00 · c3135402ad
commit c3135402ad
parent f50f48b55b
1 changed files with 8 additions and 1 deletions
--- a/site-cookbooks/kosmos-base/recipes/letsencrypt.rb
+++ b/site-cookbooks/kosmos-base/recipes/letsencrypt.rb
@ -15,7 +15,14 @@ end

 package "certbot"

-file "/etc/letsencrypt/renewal-hooks/post/nginx" do
+directory "/etc/letsencrypt/renewal-hooks" do
+  recursive true
+  mode 0755
+  owner "root"
+  group "root"
+end
+
+file "/etc/letsencrypt/renewal-hooks/deploy/nginx" do
  content <<-EOF
 #!/usr/bin/env bash
 # Reloading nginx is enough to read the new certificates