kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 26 Pull Requests 2 Projects 2 Activity

Don't run the Let's Encrypt set up in development

Browse Source
This commit is contained in:
Greg Karékinian 2017-04-28 12:01:17 +02:00
parent c9879a60e2
commit d6cc8509bc
1 changed files with 14 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
site-cookbooks/sockethub/recipes/proxy.rb
View File

@ -2,14 +2,14 @@
# Cookbook Name:: sockethub
# Recipe:: proxy
#
# Copyright 2015, Kosmos
# Copyright 2015-2017, Kosmos
#
# All rights reserved - Do Not Redistribute
#
include_recipe "kosmos-base::letsencrypt"
unless node.chef_environment == "development"
include_recipe "kosmos-base::letsencrypt"
include_recipe "firewall"
firewall_rule 'sockethub' do
port node['sockethub']['external_port'].to_i
@ -21,9 +21,10 @@ end
include_recipe 'kosmos-nginx'
directory "/var/www/sockethub" do
owner node["nginx"]["user"]
group node["nginx"]["group"]
action :create
owner node["nginx"]["user"]
group node["nginx"]["group"]
action :create
recursive true
end
include_recipe 'kosmos-nginx'
@ -40,11 +41,13 @@ template "#{node['nginx']['dir']}/sites-available/sockethub" do
notifies :reload, 'service[nginx]', :delayed
end
execute "letsencrypt cert for sockethub.kosmos.org" do
command "./certbot-auto certonly --webroot --agree-tos --email ops@5apps.com --webroot-path /var/www/sockethub -d sockethub.kosmos.org -n"
cwd "/usr/local/certbot"
not_if { File.exist? "/etc/letsencrypt/live/sockethub.kosmos.org/fullchain.pem" }
notifies :reload, "service[nginx]", :delayed
unless node.chef_environment == "development"
execute "letsencrypt cert for sockethub.kosmos.org" do
command "./certbot-auto certonly --webroot --agree-tos --email ops@5apps.com --webroot-path /var/www/sockethub -d sockethub.kosmos.org -n"
cwd "/usr/local/certbot"
not_if { File.exist? "/etc/letsencrypt/live/sockethub.kosmos.org/fullchain.pem" }
notifies :reload, "service[nginx]", :delayed
end
end
nginx_site 'sockethub' do