From bfea15615fa603dcddd6e0512cf8d1cd52063bb8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Hugo=20H=C3=B6rnquist?= Date: Tue, 4 Jan 2022 03:11:48 +0100 Subject: letsencrypt --- modules/profiles/manifests/gandalf_web.pp | 36 ------------------------------- 1 file changed, 36 deletions(-) (limited to 'modules/profiles/manifests/gandalf_web.pp') diff --git a/modules/profiles/manifests/gandalf_web.pp b/modules/profiles/manifests/gandalf_web.pp index 98b539f..dfa00f8 100644 --- a/modules/profiles/manifests/gandalf_web.pp +++ b/modules/profiles/manifests/gandalf_web.pp @@ -10,40 +10,4 @@ class profiles::gandalf_web ( recurse => true, } - # TODO this fails at bootstrapping, since letsencrypt requires nginx - # to be enabled, but nginx can't be enabled if any cert file is - # missing - # Letsencrypt::Certonly <| |> -> Nginx::Resource::Server <| |> - - $domains = [ - 'bookmark.gandalf.adrift.space', - 'calendar.gandalf.adrift.space', - 'repo.gandalf.adrift.space', - 'gandalf.adrift.space', - 'hack.adrift.space', - 'adrift.space', - ] - - ensure_packages (['cronie',], { ensure => installed }) - - ensure_packages (['certbot', 'certbot-nginx'], { ensure => installed }) - class { '::letsencrypt': - config => { - email => 'hugo@hornquist.se', - # server => 'https://acme-staging-v02.api.letsencrypt.org/directory', - server => 'https://acme-v02.api.letsencrypt.org/directory', - }, - manage_install => false, - } - - letsencrypt::certonly { $certname: - ensure => present, - domains => $domains, - manage_cron => true, - plugin => 'nginx', - additional_args => [ '--quiet', ], - # pre_hook_commands => [ 'systemctl stop nginx.service', ], - post_hook_commands => [ 'systemctl restart nginx.service', ], - } - } -- cgit v1.2.3