bundles/letsencrypt: generate a dummy certificate, if no certificate already exists

This commit is contained in:
Franzi 2021-02-20 13:52:20 +01:00
parent 014b6029c5
commit 228786f6aa
Signed by: kunsi
GPG key ID: 12E3D2136B818350
3 changed files with 45 additions and 5 deletions

View file

@ -9,15 +9,23 @@ actions = {
'command': 'dehydrated --cron --accept-terms --challenge http-01',
'triggered': True,
'needs': {
'pkg_apt:dehydrated',
'pkg_apt:nginx',
},
'needed_by': {
'svc_systemd:nginx',
},
},
}
for domain, _ in node.metadata.get('letsencrypt/domains').items():
actions['letsencrypt_ensure-some-certificate_{}'.format(domain)] = {
'command': '/etc/dehydrated/letsencrypt-ensure-some-certificate {}'.format(domain),
'unless': '/etc/dehydrated/letsencrypt-ensure-some-certificate {} true'.format(domain),
'needs': {
'file:/etc/dehydrated/letsencrypt-ensure-some-certificate',
},
'needed_by': {
'svc_systemd:nginx',
},
}
files = {
'/etc/dehydrated/domains.txt': {
'content_type': 'mako',
@ -34,4 +42,7 @@ files = {
'content_type': 'mako',
'mode': '0755',
},
'/etc/dehydrated/letsencrypt-ensure-some-certificate': {
'mode': '0755',
},
}