websites/darkchestofwonders.us: Use Lego cert

certs/websites/darkchestofwonders.us.cer

@@ -0,0 +1 @@
+../lego/darkchestofwonders.us.crt

certs/websites/darkchestofwonders.us.key

@@ -0,0 +1 @@
+../lego/darkchestofwonders.us.key

roles/websites/darkchestofwonders.us/meta/main.yml

@@ -1,4 +0,0 @@
-dependencies:
-- role: certbot
-  certbot_domains:
-  - darkchestofwonders.us

roles/websites/darkchestofwonders.us/templates/darkchestofwonders.us.httpd.conf.j2

@@ -16,8 +16,8 @@ RewriteRule (.*) https://%{SERVER_NAME}$1 [R=301,L]
 ServerName darkchestofwonders.us
 
 Include conf.d/ssl.include
-SSLCertificateKeyFile /var/lib/letsencrypt/live/darkchestofwonders.us/privkey.pem
+SSLCertificateKeyFile /etc/pki/tls/private/darkchestofwonders.us.key
-SSLCertificateFile /var/lib/letsencrypt/live/darkchestofwonders.us/fullchain.pem
+SSLCertificateFile /etc/pki/tls/certs/darkchestofwonders.us.cer
 
 <IfModule mod_headers.c>
 	Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains"

websites.yml

@@ -25,6 +25,11 @@
     tags: websites/ebonfire.com
   - role: websites/nratonpass.com
     tags: websites/nratonpass.com
+  - role: cert
+    cert_src: websites/darkchestofwonders.us.cer
+    cert_dest: /etc/pki/tls/certs/darkchestofwonders.us.cer
+    cert_key_src: websites/darkchestofwonders.us.key
+    cert_key_dest: /etc/pki/tls/private/darkchestofwonders.us.key
   - role: websites/darkchestofwonders.us
     tags: websites/darkchestofwonders.us
   - role: cert