websites: dustin.hatch.n: Switch to mod_md for cert

The _dustin.hatch.name_ site now obtains its certificate from Let's
Encrypt using the Apache _mod_md_ (managed domain) module.  This
dramatically simplifies the deployment of this certificate, eliminating
the need for _cert-manager_ to obtain it, _cert-exporter_ to add it to
_certs.git_, and Jenkins to push it out to the web server.
unifi-restore
Dustin 2025-08-04 09:47:04 -05:00
parent 71b1363c58
commit 84a8a0d4af
4 changed files with 1 additions and 10 deletions

View File

@ -1 +0,0 @@
../../.certs/acme.sh/dustin.hatch.name/fullchain.cer

View File

@ -1 +0,0 @@
../../.certs/acme.sh/dustin.hatch.name/dustin.hatch.name.key

View File

@ -1,4 +1,5 @@
# vim: set ft=apache :
MDomain dustin.hatch.name
<VirtualHost _default_:80>
ServerName dustin.hatch.name
@ -11,8 +12,6 @@ RewriteRule (.*) https://%{SERVER_NAME}$1 [R=301,L]
ServerName dustin.hatch.name
Include conf.d/ssl.include
SSLCertificateKeyFile /etc/pki/tls/private/dustin.hatch.name.key
SSLCertificateFile /etc/pki/tls/certs/dustin.hatch.name.cer
<IfModule mod_headers.c>
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"

View File

@ -10,12 +10,6 @@
tags: formsubmit
- role: websites/pyrocufflink.net
tags: websites/pyrocufflink.net
- role: cert
cert_src: websites/dustin.hatch.name.cer
cert_dest: /etc/pki/tls/certs/dustin.hatch.name.cer
cert_key_src: websites/dustin.hatch.name.key
cert_key_dest: /etc/pki/tls/private/dustin.hatch.name.key
tags: websites/dustin.hatch.name
- role: websites/dustin.hatch.name
tags: websites/dustin.hatch.name
- role: websites/ebonfire.com