bundles/nginx: make sure we have dhparam.pem

2020-10-31 10:18:40 +01:00 · 2020-10-31 10:18:40 +01:00 · 113221a9b2
parent 9cc5c07466
commit 113221a9b2
1 changed files with 8 additions and 0 deletions
--- a/bundles/nginx/items.py
+++ b/bundles/nginx/items.py
@ -22,9 +22,17 @@ files = {
    },
 }

+actions = {
+    'nginx-generate-dhparam': {
+        'command': 'openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048',
+        'unless': 'test -f /etc/ssl/certs/dhparam.pem',
+    },
+}
+
 svc_systemd = {
    'nginx': {
        'needs': {
+            'action:nginx-generate-dhparam',
            'pkg_apt:nginx',
        },
    },