kazu634
/
itamae
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Deploy `dhparams_4096.pem` & `ticket.key`.

This commit is contained in:
Kazuhiro MUSASHI 2019-11-03 13:32:08 +08:00 committed by Gitea
parent 37e11592cd
commit 28053a2c37
3 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
cookbooks/blog/ssl.rb
View File

@ -1,6 +1,8 @@
remote_file "/etc/letsencrypt/live/#{node['blog']['FQDN']}/dhparams_4096.pem" do remote_file "/etc/lego/dhparams_4096.pem" do
owner 'root' owner 'root'
group 'root' group 'root'
mode '444'
end end
execute "openssl rand 48 > /etc/letsencrypt/live/#{node['blog']['FQDN']}/ticket.key" execute "openssl rand 48 > /etc/lego/ticket.key"

0
cookbooks/blog/files/etc/letsencrypt/live/blog.kazu634.com/dhparams_4096.pem → cookbooks/nginx/files/etc/lego/dhparams_4096.pem
View File

8
cookbooks/nginx/lego.rb
View File

@ -98,3 +98,11 @@ encrypted_remote_file '/etc/cron.d/lego' do
source 'files/etc/cron.d/lego' source 'files/etc/cron.d/lego'
password ENV['ITAMAE_PASSWORD'] password ENV['ITAMAE_PASSWORD']
end end
remote_file "/etc/lego/dhparams_4096.pem" do
owner 'root'
group 'root'
mode '444'
end
execute "openssl rand 48 > /etc/lego/ticket.key"