dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

Compare commits

base: dustin:713fd794a3acc4ed31e7ce910a5c3b10dacdd75b
Branches Tags
dustin:master
dustin:unifi-restore
dustin:dynamic-inventory
dustin:frigate-exporter
dustin:nut0
dustin:nut-monitor
dustin:no-vault-in-inventory
dustin:wheelhost
dustin:chrony
dustin:step-ssh
dustin:btop
dustin:collectd-buildroot
dustin:ntfy
dustin:jenkins-master
...
compare: dustin:b72676a1bbb3000e109c2d5213bbdef1bc73c4d3
Branches Tags
dustin:master
dustin:unifi-restore
dustin:dynamic-inventory
dustin:frigate-exporter
dustin:nut0
dustin:nut-monitor
dustin:no-vault-in-inventory
dustin:wheelhost
dustin:chrony
dustin:step-ssh
dustin:btop
dustin:collectd-buildroot
dustin:ntfy
dustin:jenkins-master

3 Commits
713fd794a3 ... b72676a1bb

Author SHA1 Message Date
Dustin b72676a1bb nextcloud: Fetch HTTPS cert from Kubernetes 
Since Nextcloud uses the _pyrocufflink.net_ wildcard certificate, we can
load it directly from the Kubernetes Secret, rather than from the file
in the _certs_ submodule, just like Gitea et al.
 2025-08-11 10:39:54 -05:00
Dustin f5ab739c9e websites: dustinandtabitha: Switch to mod_md for cert 
The _dustinandtabitha.com_ site now obtains its certificate from Let's
Encrypt using the Apache _mod_md_ (managed domain) module.  This
dramatically simplifies the deployment of this certificate, eliminating
the need for _cert-manager_ to obtain it, _cert-exporter_ to add it to
_certs.git_, and Jenkins to push it out to the web server.
 2025-08-11 10:34:30 -05:00
Dustin 33da25209d r/lego: Fix timer unit trigger 
`OnActiveSec` only fires once.  To trigger the renew periodically, we
need to use `OnCalendar`.
 2025-08-10 17:45:46 -05:00
7 changed files with 4 additions and 22 deletions
Show Stats Expand all files Collapse all files

1
certs/websites/dustinandtabitha.com.cer
View File

@ -1 +0,0 @@
../lego/dustinandtabitha.com.crt

1
certs/websites/dustinandtabitha.com.key
View File

@ -1 +0,0 @@
../lego/dustinandtabitha.com.key

1
hosts
View File

@ -278,6 +278,7 @@ file0.pyrocufflink.blue
[wildcard-cert:children] [wildcard-cert:children]
file-servers file-servers
gitea gitea
nextcloud
pxe pxe
[zezere] [zezere]

2
roles/lego/files/lego-renew.timer
View File

@ -3,7 +3,7 @@ Description=Periodically renew certificates with LEGO
[Timer] [Timer]
RandomizedDelaySec=15m RandomizedDelaySec=15m
OnActiveSec=4h OnCalendar=*-*-* 00/4:00:00
[Install] [Install]
WantedBy=timers.target WantedBy=timers.target

8
roles/nextcloud/meta/main.yml
View File

@ -3,11 +3,3 @@ dependencies:
- role: redis - role: redis
tags: tags:
- redis - redis
- role: cert
vars:
cert_src: lego/_.pyrocufflink.net.crt
cert_dest: '{{ apache_ssl_certificate }}'
cert_key_src: lego/_.pyrocufflink.net.key
cert_key_dest: '{{ apache_ssl_certificate_key }}'
tags:
- nextcloud

4
roles/websites/dustinandtabitha.com/files/dustinandtabitha.httpd.conf
View File

@ -1,3 +1,5 @@
MDomain dustinandtabitha.com
<VirtualHost _default_:80> <VirtualHost _default_:80>
ServerName dustinandtabitha.com ServerName dustinandtabitha.com
ServerAlias www.dustinandtabitha.com ServerAlias www.dustinandtabitha.com
@ -11,8 +13,6 @@ ServerName dustinandtabitha.com
ServerAlias www.dustinandtabitha.com ServerAlias www.dustinandtabitha.com
Include conf.d/ssl.include Include conf.d/ssl.include
SSLCertificateKeyFile /etc/pki/tls/private/dustinandtabitha.com.key
SSLCertificateFile /etc/pki/tls/certs/dustinandtabitha.com.cer
<IfModule mod_headers.c> <IfModule mod_headers.c>
Header always set \ Header always set \

9
roles/websites/dustinandtabitha.com/meta/main.yml
View File

@ -1,9 +0,0 @@
dependencies:
- role: cert
vars:
cert_src: websites/dustinandtabitha.com.cer
cert_dest: /etc/pki/tls/certs/dustinandtabitha.com.cer
cert_key_src: websites/dustinandtabitha.com.key
cert_key_dest: /etc/pki/tls/private/dustinandtabitha.com.key
tags:
- websites/dustinandtabitha