websites: chmod777.sh: Switch to mod_md for cert

The _chmod777.sh_ site now obtains its certificate from Let's
Encrypt using the Apache _mod_md_ (managed domain) module.  This
dramatically simplifies the deployment of this certificate, eliminating
the need for _cert-manager_ to obtain it, _cert-exporter_ to add it to
_certs.git_, and Jenkins to push it out to the web server.
unifi-restore
Dustin 2025-07-28 18:53:58 -05:00
parent 2b12ce769c
commit 7f8e39ebd4
4 changed files with 2 additions and 14 deletions

View File

@ -1 +0,0 @@
../logo/chmod777.sh.crt

View File

@ -1 +0,0 @@
../logo/chmod777.sh.key

View File

@ -6,17 +6,16 @@ RewriteEngine On
RewriteRule (.*) https://%{SERVER_NAME}$1 [R=301,L]
</VirtualHost>
MDomain chmod777.sh
<VirtualHost _default_:443>
ServerName chmod777.sh
ServerAlias blog.chmod777.sh www.chmod777.sh
RewriteEngine On
RewriteCond %{SERVER_NAME} !^chmod777\.sh
RewriteRule (.*) https://chmod777.sh$2 [R=301,L]
Include conf.d/ssl.include
SSLCertificateKeyFile /etc/pki/tls/private/chmod777.sh.key
SSLCertificateFile /etc/pki/tls/certs/chmod777.sh.cer
<IfModule mod_headers.c>
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"

View File

@ -1,9 +0,0 @@
dependencies:
- role: cert
vars:
cert_src: websites/chmod777.sh.cer
cert_dest: /etc/pki/tls/certs/chmod777.sh.cer
cert_key_src: websites/chmod777.sh.key
cert_key_dest: /etc/pki/tls/private/chmod777.sh.key
tags:
- websites/chmod777.sh