Page MenuHomeDevCentral
Files F3768506

D3546.id9111.diff
No OneTemporary
Actions

D3546.id9111.diff
View Options

diff --git a/roles/core/certificates/acmesh.sls b/roles/core/certificates/acmesh.sls
new file mode 100644
--- /dev/null
+++ b/roles/core/certificates/acmesh.sls
@@ -0,0 +1,29 @@
+# -------------------------------------------------------------
+# Salt - Deploy acme.sh
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# License: Trivial work, not eligible to copyright
+# -------------------------------------------------------------
+
+acme.sh:
+ pkg.installed
+
+/var/certificates/general:
+ file.directory:
+ - user: acme
+ - mode: 700
+ - makedirs: True
+
+/usr/local/etc/newsyslog.conf.d/acme.sh.conf:
+ file.managed:
+ - source: salt://roles/core/certificates/files/syslog/acme.sh.conf
+
+acmesh_newsyslog_run:
+ cmd.run:
+ - name: newsyslog -NC
+ - creates: /var/log/acme.sh.log
+
+/usr/local/etc/cron.d/acmesh:
+ file.managed:
+ - source: salt://roles/core/certificates/files/acmesh/acme.sh.cron
+ - makedirs: True
diff --git a/roles/core/certificates/files/acmesh/acme.sh.cron b/roles/core/certificates/files/acmesh/acme.sh.cron
new file mode 100644
--- /dev/null
+++ b/roles/core/certificates/files/acmesh/acme.sh.cron
@@ -0,0 +1,19 @@
+# -------------------------------------------------------------
+# acme.sh crontab
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# License: Trivial work, not eligible to copyright
+# Source file: roles/core/certificates/files/acmesh/acme.sh.cron
+# -------------------------------------------------------------
+#
+# <auto-generated>
+# This file is managed by our rOPS SaltStack repository.
+#
+# Changes to this file may cause incorrect behavior
+# and will be lost if the state is redeployed.
+# </auto-generated>
+
+MAILTO=ops-tls@nasqueron.org
+
+# This will send only errors to your email, everything else goes to /dev/null
+05 03 * * * acme /usr/local/sbin/acme.sh --cron --home /var/db/acme/.acme.sh > /dev/null
diff --git a/roles/core/certificates/files/syslog/acme.sh.conf b/roles/core/certificates/files/syslog/acme.sh.conf
new file mode 100644
--- /dev/null
+++ b/roles/core/certificates/files/syslog/acme.sh.conf
@@ -0,0 +1,17 @@
+# -------------------------------------------------------------
+# acme.sh newsyslog config
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# License: Trivial work, not eligible to copyright
+# Source file: roles/core/certificates/files/acmesh/acme.sh.conf
+# -------------------------------------------------------------
+#
+# <auto-generated>
+# This file is managed by our rOPS SaltStack repository.
+#
+# Changes to this file may cause incorrect behavior
+# and will be lost if the state is redeployed.
+# </auto-generated>
+
+# logfilename [owner:group] mode count size when flags [/pid_file] [sig_num]
+/var/log/acme.sh.log acme:acme 640 90 * @T00 BC

File Metadata

Mime Type
text/plain
Expires
Sun, Nov 24, 08:23 (16 h, 52 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
2259836
Default Alt Text
D3546.id9111.diff (2 KB)

Event Timeline

Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator