Don't run the Let's Encrypt set up in development

This commit is contained in:
Greg Karékinian 2017-04-28 12:01:17 +02:00
parent c9879a60e2
commit d6cc8509bc

View File

@ -2,14 +2,14 @@
# Cookbook Name:: sockethub # Cookbook Name:: sockethub
# Recipe:: proxy # Recipe:: proxy
# #
# Copyright 2015, Kosmos # Copyright 2015-2017, Kosmos
# #
# All rights reserved - Do Not Redistribute # All rights reserved - Do Not Redistribute
# #
unless node.chef_environment == "development"
include_recipe "kosmos-base::letsencrypt" include_recipe "kosmos-base::letsencrypt"
unless node.chef_environment == "development"
include_recipe "firewall" include_recipe "firewall"
firewall_rule 'sockethub' do firewall_rule 'sockethub' do
port node['sockethub']['external_port'].to_i port node['sockethub']['external_port'].to_i
@ -24,6 +24,7 @@ directory "/var/www/sockethub" do
owner node["nginx"]["user"] owner node["nginx"]["user"]
group node["nginx"]["group"] group node["nginx"]["group"]
action :create action :create
recursive true
end end
include_recipe 'kosmos-nginx' include_recipe 'kosmos-nginx'
@ -40,12 +41,14 @@ template "#{node['nginx']['dir']}/sites-available/sockethub" do
notifies :reload, 'service[nginx]', :delayed notifies :reload, 'service[nginx]', :delayed
end end
unless node.chef_environment == "development"
execute "letsencrypt cert for sockethub.kosmos.org" do execute "letsencrypt cert for sockethub.kosmos.org" do
command "./certbot-auto certonly --webroot --agree-tos --email ops@5apps.com --webroot-path /var/www/sockethub -d sockethub.kosmos.org -n" command "./certbot-auto certonly --webroot --agree-tos --email ops@5apps.com --webroot-path /var/www/sockethub -d sockethub.kosmos.org -n"
cwd "/usr/local/certbot" cwd "/usr/local/certbot"
not_if { File.exist? "/etc/letsencrypt/live/sockethub.kosmos.org/fullchain.pem" } not_if { File.exist? "/etc/letsencrypt/live/sockethub.kosmos.org/fullchain.pem" }
notifies :reload, "service[nginx]", :delayed notifies :reload, "service[nginx]", :delayed
end end
end
nginx_site 'sockethub' do nginx_site 'sockethub' do
enable true enable true