Differential D3906 Diff 10122 roles/core/certificates/acmesh.sls

Changeset View

Standalone View

	Show All 28 Lines
	/var/certificates/general:			/var/certificates/general:
	file.directory:			file.directory:
	- user: acme			- user: acme
	- mode: 700			- mode: 700

	{% for domain in certificates %}			{% for domain in certificates %}
	{% set options = certificates_options.get(domain, {}) %}			{% set options = certificates_options.get(domain, {}) %}

				deploy_certificate_for_domain_{{ domain }}:
				cmd.run:
				- name: \|
				acme.sh --install-cert -d {{ domain }} \
				{% if "reload" in options %}--reloadcmd "{{ options["reload"] }}"{% endif %} \
				--cert-file /var/certificates/{{ domain }}/cert.pem \
				--key-file /var/certificates/{{ domain }}/key.pem \
				--fullchain-file /var/certificates/{{ domain }}/fullchain.pem \
				--ca-file /var/certificates/{{ domain }}/chain.pem
				- runas: acme

	/var/certificates/{{ domain }}:			/var/certificates/{{ domain }}:
	file.directory:			file.directory:
	- user: acme			- user: acme

	{% if "shared_group" in options %}			{% if "shared_group" in options %}
	- group: {{ options.shared_group }}			- group: {{ options.shared_group }}
	- mode: 750			- mode: 750
	{% else %}			{% else %}
	▲ Show 20 Lines • Show All 42 Lines • Show Last 20 Lines