acmesh.sls
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

acmesh.sls
View Options

	# -------------------------------------------------------------
	# Salt - Deploy acme.sh
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	# Project: Nasqueron
	# License: Trivial work, not eligible to copyright
	# -------------------------------------------------------------

	{% from "map.jinja" import dirs with context %}

	{% set certificates = pillar.get("certificates", []) %}
	{% set certificates_options = pillar.get("certificates_options", {}) %}

	acme.sh:
	pkg.installed

	/var/certificates:
	file.directory:
	- user: acme
	- mode: 711

	/var/certificates/general:
	file.directory:
	- user: acme
	- mode: 700

	{% for domain in certificates %}
	{% set options = certificates_options.get(domain, {}) %}

	/var/certificates/{{ domain }}:
	file.directory:
	- user: acme

	{% if "shared_group" in options %}
	- group: {{ options.shared_group }}
	- mode: 750
	{% else %}
	- mode: 700
	{% endif %}

	{% endfor %}

	/usr/local/etc/newsyslog.conf.d/acme.sh.conf:
	file.managed:
	- source: salt://roles/core/certificates/files/syslog/acme.sh.conf

	acmesh_newsyslog_run:
	cmd.run:
	- name: newsyslog -NC
	- creates: /var/log/acme.sh.log

	/usr/local/etc/cron.d/acmesh:
	file.managed:
	- source: salt://roles/core/certificates/files/acmesh/acme.sh.cron
	- makedirs: True

	{{ dirs.bin }}/acmesh-nginxCheck:
	file.managed:
	- source: salt://roles/core/certificates/files/acmesh-nginxCheck.sh
	- mode: 755