kunsi/bundlewrap
1
0
Fork 0
Code Issues 1 Pull requests 2 Releases Activity

bundles/{letsencrypt,nginx}: fix ocsp stapling
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
Details

Browse source
This commit is contained in:
Franzi 2020-07-19 12:10:19 +02:00
parent 245559ee09
commit f7eb0cc150
Signed by: kunsi
GPG key ID: 12E3D2136B818350
4 changed files with 9 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
bundles/letsencrypt/files/config
View file

@ -3,3 +3,5 @@ BASEDIR=/var/lib/dehydrated
WELLKNOWN="${BASEDIR}/acme-challenges"
DOMAINS_TXT="/etc/dehydrated/domains.txt"
HOOK="/etc/dehydrated/hook.sh"
OCSP_MUST_STAPLE="yes"
OCSP_FETCH="yes"

2
bundles/letsencrypt/items.py
View file

@ -6,7 +6,7 @@ pkg_apt = {
actions = {
'letsencrypt_update_certificates': {
'command': 'dehydrated --cron --accept-terms --ocsp --challenge http-01',
'command': 'dehydrated --cron --accept-terms --challenge http-01',
'triggered': True,
'needs': {
'pkg_apt:dehydrated',

2
bundles/letsencrypt/metadata.py
View file

@ -2,7 +2,7 @@
def crontab(metadata):
return {
'cron': {
'letsencrypt_renew': '20 4 * * * root /usr/bin/dehydrated --cron --accept-terms --ocsp --challenge http-01 > /dev/null',
'letsencrypt_renew': '20 4 * * * root /usr/bin/dehydrated --cron --accept-terms --challenge http-01 > /dev/null',
'letsencrypt_cleanup': '42 23 * * 0 root /usr/bin/dehydrated --cleanup > /dev/null',
},
}, DEFAULTS, DONE