summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorHugo Hörnquist <hugo@lysator.liu.se>2023-11-29 05:19:36 +0100
committerHugo Hörnquist <hugo@lysator.liu.se>2023-11-29 05:19:36 +0100
commitcd1fadd1752b68b38cee56c9a484ebf85c63c806 (patch)
tree57539bf4d18f58d9625f72c94635e1b2cd6e70a1
parentSet layout for keycool keyboard. (diff)
downloadprofiles-master.tar.gz
profiles-master.tar.xz
Default certificates to certname instead of hostname.HEADmaster
Hostname is usually the local component (e.g. gandalf), which you obviously can't get a certificate for. certname is usually the FQDN, which is what we want.
-rw-r--r--manifests/certificate.pp4
1 files changed, 2 insertions, 2 deletions
diff --git a/manifests/certificate.pp b/manifests/certificate.pp
index 14e7d2e..b630864 100644
--- a/manifests/certificate.pp
+++ b/manifests/certificate.pp
@@ -2,13 +2,13 @@
# Should preferably be included before a letsencrypt::domain resource
# is declared.
class profiles::certificate (
- String $cert_name = $trusted['hostname'],
+ String $cert_name = $trusted['certname'],
Letsencrypt::Authenticator $authenticator = 'nginx',
Hash[String,Any] $config = {
# more portable than 'systemctl reload nginx'
'post-hook' => 'nginx -s reload',
},
- Array[String] $default_domains = [ $trusted['hostname'], ],
+ Array[String] $default_domains = [ $trusted['certname'], ],
) {
include ::letsencrypt