websites: chmod777.sh: Switch to mod_md for cert
The _chmod777.sh_ site now obtains its certificate from Let's Encrypt using the Apache _mod_md_ (managed domain) module. This dramatically simplifies the deployment of this certificate, eliminating the need for _cert-manager_ to obtain it, _cert-exporter_ to add it to _certs.git_, and Jenkins to push it out to the web server.unifi-restore
parent
2b12ce769c
commit
7f8e39ebd4
|
@ -1 +0,0 @@
|
|||
../logo/chmod777.sh.crt
|
|
@ -1 +0,0 @@
|
|||
../logo/chmod777.sh.key
|
|
@ -6,17 +6,16 @@ RewriteEngine On
|
|||
RewriteRule (.*) https://%{SERVER_NAME}$1 [R=301,L]
|
||||
</VirtualHost>
|
||||
|
||||
MDomain chmod777.sh
|
||||
|
||||
<VirtualHost _default_:443>
|
||||
ServerName chmod777.sh
|
||||
ServerAlias blog.chmod777.sh www.chmod777.sh
|
||||
|
||||
RewriteEngine On
|
||||
RewriteCond %{SERVER_NAME} !^chmod777\.sh
|
||||
RewriteRule (.*) https://chmod777.sh$2 [R=301,L]
|
||||
|
||||
Include conf.d/ssl.include
|
||||
SSLCertificateKeyFile /etc/pki/tls/private/chmod777.sh.key
|
||||
SSLCertificateFile /etc/pki/tls/certs/chmod777.sh.cer
|
||||
|
||||
<IfModule mod_headers.c>
|
||||
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
|
||||
|
|
|
@ -1,9 +0,0 @@
|
|||
dependencies:
|
||||
- role: cert
|
||||
vars:
|
||||
cert_src: websites/chmod777.sh.cer
|
||||
cert_dest: /etc/pki/tls/certs/chmod777.sh.cer
|
||||
cert_key_src: websites/chmod777.sh.key
|
||||
cert_key_dest: /etc/pki/tls/private/chmod777.sh.key
|
||||
tags:
|
||||
- websites/chmod777.sh
|
Loading…
Reference in New Issue