From 90ba14a0d7611a88393f9d7861eead626eea313b Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Mon, 16 Mar 2020 09:09:47 -0500
Subject: [PATCH] websites/darkchestofwonders.us: Use Lego cert

---
 .certs                                                       | 2 +-
 roles/websites/darkchestofwonders.us/meta/main.yml           | 4 ----
 .../templates/darkchestofwonders.us.httpd.conf.j2            | 4 ++--
 websites.yml                                                 | 5 +++++
 4 files changed, 8 insertions(+), 7 deletions(-)
 delete mode 100644 roles/websites/darkchestofwonders.us/meta/main.yml

diff --git a/.certs b/.certs
index 7685cdd..654b52b 160000
--- a/.certs
+++ b/.certs
@@ -1 +1 @@
-Subproject commit 7685cddf5200f168e26df2cf2b2863bc3e9dadb5
+Subproject commit 654b52b6080c1a54b6466ac9cdc00da8d2c910d9
diff --git a/roles/websites/darkchestofwonders.us/meta/main.yml b/roles/websites/darkchestofwonders.us/meta/main.yml
deleted file mode 100644
index a90199a..0000000
--- a/roles/websites/darkchestofwonders.us/meta/main.yml
+++ /dev/null
@@ -1,4 +0,0 @@
-dependencies:
-- role: certbot
-  certbot_domains:
-  - darkchestofwonders.us
diff --git a/roles/websites/darkchestofwonders.us/templates/darkchestofwonders.us.httpd.conf.j2 b/roles/websites/darkchestofwonders.us/templates/darkchestofwonders.us.httpd.conf.j2
index d0a62bd..8954a26 100644
--- a/roles/websites/darkchestofwonders.us/templates/darkchestofwonders.us.httpd.conf.j2
+++ b/roles/websites/darkchestofwonders.us/templates/darkchestofwonders.us.httpd.conf.j2
@@ -16,8 +16,8 @@ RewriteRule (.*) https://%{SERVER_NAME}$1 [R=301,L]
 ServerName darkchestofwonders.us
 
 Include conf.d/ssl.include
-SSLCertificateKeyFile /var/lib/letsencrypt/live/darkchestofwonders.us/privkey.pem
-SSLCertificateFile /var/lib/letsencrypt/live/darkchestofwonders.us/fullchain.pem
+SSLCertificateKeyFile /etc/pki/tls/certs/darkchestofwonders.us.cer
+SSLCertificateFile /etc/pki/tls/private/darkchestofwonders.us.key
 
 <IfModule mod_headers.c>
 	Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"
diff --git a/websites.yml b/websites.yml
index 7f6be03..be89b63 100644
--- a/websites.yml
+++ b/websites.yml
@@ -25,6 +25,11 @@
     tags: websites/ebonfire.com
   - role: websites/nratonpass.com
     tags: websites/nratonpass.com
+  - role: cert
+    cert_src: websites/darkchestofwonders.us.cer
+    cert_dest: /etc/pki/tls/certs/darkchestofwonders.us.cer
+    cert_key_src: websites/darkchestofwonders.us.key
+    cert_key_dest: /etc/pki/tls/private/darkchestofwonders.us.key
   - role: websites/darkchestofwonders.us
     tags: websites/darkchestofwonders.us
   - role: cert