Paths

Table of Contentst

Differential D2181

Allow certbot to use acme.nasqueron.org on Docker engines
ClosedPublic
Actions

Authored by dereckson on Feb 4 2020, 22:22.

Tags

None

Referenced Files

	Unknown Object (File)
	Thu, Dec 19, 05:47

	Unknown Object (File)
	Thu, Dec 19, 05:45

	Unknown Object (File)
	Thu, Dec 19, 04:47

	Unknown Object (File)
	Thu, Dec 19, 02:45

	Unknown Object (File)
	Mon, Dec 16, 14:09

	Unknown Object (File)
	Sun, Dec 15, 04:36

	Unknown Object (File)
	Fri, Dec 13, 05:57

	Unknown Object (File)
	Tue, Dec 10, 15:29

Subscribers

None

Details

Reviewers

Maniphest Tasks

T1580: Deploy ACME-specific DNS server

Commits

rOPS290737dd5834: Allow certbot to use acme.nasqueron.org on Docker engines

Summary

Deploy the Certbot plugin to use ACME DNS Server.

Source: https://github.com/joohoi/acme-dns-certbot-joohoi

Intended use is certbot acme-dns-certonly -d <domain name>.

Ref T1580.

Test Plan

certbot acme-dns-certonly -d xmpp.nasqueron.org -d conference.nasqueron.org -d nasqueron.org

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Errors

Severity	Location	Code	Message
Error	roles/paas-docker/wrappers/files/certbot.sh:1	ShellCheck	SHELLCHECK

Unit

No Test Coverage

Branch

acme-dns-auth

Build Status

Buildable 3384
Build 3633: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Feb 4 2020, 22:22

dereckson created this revision.

Harbormaster completed remote builds in B3384: Diff 5488.Feb 4 2020, 22:22

dereckson accepted this revision.Feb 4 2020, 22:23

dereckson edited the summary of this revision. (Show Details)

dereckson edited the test plan for this revision. (Show Details)

dereckson added a reviewer: dereckson.

This revision is now accepted and ready to land.Feb 4 2020, 22:24

dereckson retitled this revision from Allow certbot to use acme.nasqueron.orgon Docker engines to Allow certbot to use acme.nasqueron.org on Docker engines.Feb 4 2020, 22:24

dereckson edited the summary of this revision. (Show Details)Feb 4 2020, 22:30

dereckson edited the test plan for this revision. (Show Details)

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/xmpp.nasqueron.org/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/xmpp.nasqueron.org/privkey.pem
   Your cert will expire on 2020-05-04. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot
   again. To non-interactively renew *all* of your certificates, run
   "certbot renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

Lint. Remove echo debug artifact.

Harbormaster completed remote builds in B3385: Diff 5489.Feb 4 2020, 22:49

Closed by commit rOPS290737dd5834: Allow certbot to use acme.nasqueron.org on Docker engines (authored by dereckson). · Explain WhyFeb 4 2020, 22:49

This revision was automatically updated to reflect the committed changes.

dereckson added a commit: rOPS290737dd5834: Allow certbot to use acme.nasqueron.org on Docker engines.

dereckson mentioned this in D2182: Allow Docker containers to use ACME DNS API.Feb 4 2020, 22:53

dereckson mentioned this in rOPS954b73ae74db: Allow Docker containers to use ACME DNS API.Feb 4 2020, 22:56

Revision Contents
Changeset List

Path

Size

roles/

paas-docker/

letsencrypt/

files/

acme-dns-auth.py

161 lines

9 lines

wrappers/

files/

12 lines

Diff 5488

roles/paas-docker/letsencrypt/files/acme-dns-auth.py

Loading...

roles/paas-docker/letsencrypt/init.sls

Loading...

roles/paas-docker/wrappers/files/certbot.sh

Loading...