bundles/letsencrypt/files/domains.txt

@@ -1,3 +1,5 @@
+${node.metadata['hostname']}
+
 % for domain, aliases in sorted(node.metadata.get('letsencrypt/domains', {}).items()):
 ${domain} ${' '.join(sorted(aliases))}
 % endfor

bundles/letsencrypt/files/letsencrypt-ensure-some-certificate

@@ -6,7 +6,7 @@ just_check=$2
 cert_path="/var/lib/dehydrated/certs/$domain"
 
 already_exists=false
-if [ -f "$cert_path/privkey.pem" -a -f "$cert_path/fullchain.pem" -a -f "$cert_path/chain.pem" ]
+if [ -f "$cert_path/privkey.pem" -a -f "$cert_path/fullchain.pem" ]
 then
     already_exists=true
 fi
@@ -23,7 +23,6 @@ fi
 
 if [ "$already_exists" != true ]
 then
-    rm -r "$cert_path"
     mkdir -p "$cert_path"
     openssl req -x509 -newkey rsa:4096 -nodes -days 3650 -subj "/CN=$domain" -keyout "$cert_path/privkey.pem" -out "$cert_path/fullchain.pem"
     chmod 0600 "$cert_path/privkey.pem"

bundles/postfix/metadata.py

@@ -49,7 +49,7 @@ else:
     'letsencrypt/reload_after',
 )
 def letsencrypt(metadata):
-    if not node.has_bundle('letsencrypt') or not node.has_bundle('postfixadmin'):
+    if not node.has_bundle('letsencrypt'):
         raise DoNotRunAgain
 
     result = {
@@ -58,8 +58,11 @@ def letsencrypt(metadata):
         },
     }
 
+    myhostname = metadata.get('postfix/myhostname', None)
+
+    if myhostname and myhostname != metadata.get('hostname'):
         result['domains'] = {
-        metadata.get('postfix/myhostname', metadata.get('hostname')): set(),
+            myhostname: set(),
         }
 
     return {

bundles/postgresql/items.py

@@ -25,10 +25,10 @@ directories = {
     },
     # This is needed so the above purge does not remove the version
     # currently installed.
-    '/etc/postgresql/{}/main'.format(postgresql_version): {
-        'owner': 'postgres',
-        'group': 'postgres',
-        'mode': '0755',
+    '/etc/postgresql/{}'.format(postgresql_version): {
+        'owner': None,
+        'group': None,
+        'mode': None,
     },
 }
 

bundles/systemd-networkd/items.py

@@ -1,5 +1,11 @@
 assert node.has_bundle('systemd')
 
+pkg_apt = {
+    'resolvconf': {
+        'installed': False,
+    },
+}
+
 files = {
     '/etc/network/interfaces': {
         'delete': True,

bundles/systemd-networkd/metadata.py

@@ -1,14 +1,3 @@
-defaults = {
-    'apt': {
-        'packages': {
-            'resolvconf': {
-                'installed': False,
-            },
-        },
-    },
-}
-
-
 @metadata_reactor.provides(
     'interfaces',
 )

bundles/zfs/items.py

@@ -19,7 +19,6 @@ actions = {
             'zfs_dataset:',
             'zfs_pool:',
         },
-        'comment': 'If this fails, do a dist-upgrade, reinstall zfs-dkms, reboot',
     },
 }
 

nodes/htz/ex42-1048908.py

@@ -49,7 +49,6 @@ nodes['htz.ex42-1048908'] = {
 
                 # No need to create a bundle just to install packages,
                 # configs will be managed by users nevertheless.
-                'mosh': {},
                 'weechat': {},
                 'weechat-core': {},
                 'weechat-curses': {},