websites: dustin.hatch.n: Switch to mod_md for cert
The _dustin.hatch.name_ site now obtains its certificate from Let's Encrypt using the Apache _mod_md_ (managed domain) module. This dramatically simplifies the deployment of this certificate, eliminating the need for _cert-manager_ to obtain it, _cert-exporter_ to add it to _certs.git_, and Jenkins to push it out to the web server.unifi-restore
parent
71b1363c58
commit
84a8a0d4af
|
@ -1 +0,0 @@
|
||||||
../../.certs/acme.sh/dustin.hatch.name/fullchain.cer
|
|
|
@ -1 +0,0 @@
|
||||||
../../.certs/acme.sh/dustin.hatch.name/dustin.hatch.name.key
|
|
|
@ -1,4 +1,5 @@
|
||||||
# vim: set ft=apache :
|
# vim: set ft=apache :
|
||||||
|
MDomain dustin.hatch.name
|
||||||
|
|
||||||
<VirtualHost _default_:80>
|
<VirtualHost _default_:80>
|
||||||
ServerName dustin.hatch.name
|
ServerName dustin.hatch.name
|
||||||
|
@ -11,8 +12,6 @@ RewriteRule (.*) https://%{SERVER_NAME}$1 [R=301,L]
|
||||||
ServerName dustin.hatch.name
|
ServerName dustin.hatch.name
|
||||||
|
|
||||||
Include conf.d/ssl.include
|
Include conf.d/ssl.include
|
||||||
SSLCertificateKeyFile /etc/pki/tls/private/dustin.hatch.name.key
|
|
||||||
SSLCertificateFile /etc/pki/tls/certs/dustin.hatch.name.cer
|
|
||||||
|
|
||||||
<IfModule mod_headers.c>
|
<IfModule mod_headers.c>
|
||||||
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
|
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
|
||||||
|
|
|
@ -10,12 +10,6 @@
|
||||||
tags: formsubmit
|
tags: formsubmit
|
||||||
- role: websites/pyrocufflink.net
|
- role: websites/pyrocufflink.net
|
||||||
tags: websites/pyrocufflink.net
|
tags: websites/pyrocufflink.net
|
||||||
- role: cert
|
|
||||||
cert_src: websites/dustin.hatch.name.cer
|
|
||||||
cert_dest: /etc/pki/tls/certs/dustin.hatch.name.cer
|
|
||||||
cert_key_src: websites/dustin.hatch.name.key
|
|
||||||
cert_key_dest: /etc/pki/tls/private/dustin.hatch.name.key
|
|
||||||
tags: websites/dustin.hatch.name
|
|
||||||
- role: websites/dustin.hatch.name
|
- role: websites/dustin.hatch.name
|
||||||
tags: websites/dustin.hatch.name
|
tags: websites/dustin.hatch.name
|
||||||
- role: websites/ebonfire.com
|
- role: websites/ebonfire.com
|
||||||
|
|
Loading…
Reference in New Issue