letsencrypt-certificates.sls
ActivePublic
Actions

Authored by dereckson on Dec 16 2023, 00:48.

Tags

None

Referenced Files

	F2454733: roles/core/certificates/letsencrypt-certificates.sls
	Dec 16 2023, 00:48

Subscribers

None

	# -------------------------------------------------------------
	# Salt — Let's encrypt certificates
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	# Project: Nasqueron
	# Created: 2017-04-27
	# License: Trivial work, not eligible to copyright
	# -------------------------------------------------------------

	{% from "map.jinja" import dirs with context %}

	# -------------------------------------------------------------
	# Certificates
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

	{% for domain in pillar.get("certificates_letsencrypt", []) %}
	certificate_{{ domain }}:
	cmd.run:
	- name: certbot certonly -d {{ domain }}
	- creates: {{ dirs.etc }}/letsencrypt/live/{{ domain }}/fullchain.pem
	{% endfor %}

	{% for key, domains in pillar.get("certificates_letsencrypt_multiple", {}).items() %}
	certificate_{{ key }}:
	cmd.run:
	- name: certbot certonly{% for domain domains %} -d {{ domain }}{% endfor %}
	- creates: {{ dirs.etc }}/letsencrypt/live/{{ domains[0] }}/fullchain.pem
	{% endfor %}

If we issue certificates through DNS, we need to issue them manually to add CNAME records.

roles/core/certificates/letsencrypt-certificates.slsActivePublicActions