Handling T1500, it has been demonstrated clumsy and slow to manually supersede domains in a Let's Encrypt certificate.
D966 started to automate Let's Encrypt certificates for Eglide, could we generalize it to everything, or at least to the most automated services like the Docker PaaS?
The goal is to force a stable certificate path (or get the path into an usable variable) to be able to have coherent nginx (or other software) configuration.
| rOPS Nasqueron Operations | |||
| D3404 Read services variable from map | |||
| D3406 | rOPS907fea4aae3d Don't deploy duplicate renewal service on Debian and RedHat | ||
| D3248 | rOPS1e9a54c10365 Deploy Certbot everywhere | ||
| D3247 | rOPS88a70074dfd5 Free certificates unit's init state for includes | ||
rOPS1e9a54c10365 has worked like a charm on WindRiver to generate grafana.nasqueron.org through DNS.
31/07/2024 at 12h the devcentral.nasqueron.org certificate expired
I have done a certificate renew of all certificate
but it seem not to work automaticaly on docker-002
Deployed D3248 to docker-002.
Next: we need to ensure all certificates used by nginx have instructions in their renewal configuration to reload nginx:
[renewalparams] renew_hook = systemctl reload nginx
Documentation added to https://agora.nasqueron.org/Operations_grimoire/TLS_certificates