D3501.id9011.diff
No OneTemporary
Actions

Size

929 B

Referenced Files

None

Subscribers

None

D3501.id9011.diff
View Options

	diff --git a/roles/core/certificates/letsencrypt.sls b/roles/core/certificates/letsencrypt.sls
	--- a/roles/core/certificates/letsencrypt.sls
	+++ b/roles/core/certificates/letsencrypt.sls
	@@ -8,6 +8,7 @@
	{% from "map.jinja" import dirs, packages with context %}

	{% set has_nginx = salt['node']['has_nginx']() %}
	+{% set has_selinux = salt["grains.get"]("selinux:enabled", False) %}

	# -------------------------------------------------------------
	# Software
	@@ -26,6 +27,17 @@
	- user: root
	- dir_mode: 711

	+{% if has_selinux %}
	+selinux_context_certbot_www:
	+ selinux.fcontext_policy_present:
	+ - name: /var/letsencrypt-auto
	+ - sel_type: httpd_sys_content_t
	+
	+selinux_context_certbot_www_applied:
	+ selinux.fcontext_policy_applied:
	+ - name: /var/letsencrypt-auto
	+{% endif %}
	+
	{{ dirs.etc }}/letsencrypt/cli.ini:
	file.managed:
	- source: salt://roles/core/certificates/files/cli.ini