22 lines
920 B
Ruby
22 lines
920 B
Ruby
# Generate a Let's Encrypt cert for 5apps.com, muc.5apps.com and xmpp.5apps.com
|
|
|
|
include_recipe "kosmos-base::letsencrypt"
|
|
|
|
gandi_api_data_bag_item = data_bag_item('credentials', 'gandi_api_5apps')
|
|
|
|
template "/root/letsencrypt_hook.sh" do
|
|
variables gandi_api_key: gandi_api_data_bag_item["key"]
|
|
mode 0770
|
|
end
|
|
|
|
# Generate a Let's Encrypt cert (only if no cert has been generated before).
|
|
# The renew cron will take care of renewing
|
|
execute "letsencrypt cert for 5apps xmpp" do
|
|
command "./certbot-auto certonly --manual --preferred-challenges dns --manual-public-ip-logging-ok --agree-tos --manual-auth-hook \"/root/letsencrypt_hook.sh auth\" --manual-cleanup-hook \"/root/letsencrypt_hook.sh cleanup\" --deploy-hook letsencrypt_renew_hook --email ops@5apps.com -d 5apps.com -d muc.5apps.com -d xmpp.5apps.com -n"
|
|
cwd "/usr/local/certbot"
|
|
not_if do
|
|
File.exist?("/etc/prosody/certs/5apps.com.crt")
|
|
end
|
|
end
|
|
|